Change log for linux-2.6 package in Debian
| 1 → 75 of 155 results | First • Previous • Next • Last |
| Published in squeeze-release |
linux-2.6 (2.6.32-48squeeze6) squeeze-security; urgency=high
[ Moritz Muehlenhoff ]
* CVE-2014-0196: Jiri Slaby discovered a race condition in the pty
layer, which could lead to denial of service or privilege escalation.
* CVE-2014-1737 / CVE-2014-1738: Matthew Daley discovered that
missing input sanitising in the FDRAWCMD ioctl and an information
leak could result in privilege escalation.
-- Moritz Muehlenhoff <email address hidden> Mon, 12 May 2014 19:38:43 -0600
| Superseded in squeeze-release |
linux-2.6 (2.6.32-48squeeze4) squeeze-security; urgency=high
[ Ian Campbell ]
* Fix regression in "xen: netback: shutdown the ring if it contains garbage
(CVE-2013-0216)" (Closes: #701744)
[ Moritz Muehlenhoff ]
* drivers/cdrom/cdrom.c: use kzalloc() for failing hardware (CVE-2013-2164)
* ipv6: ip6_sk_dst_check() must not assume ipv6 dst (CVE-2013-2232)
* af_key: fix info leaks in notify messages (CVE-2013-2234)
* af_key: initialize satype in key_notify_policy_flush() (CVE-2013-2237)
* block: do not pass disk names as format strings (CVE-2013-2851)
* b43: stop format string leaking into error msgs (CVE-2013-2852)
* sctp: Use correct sideffect command in duplicate cookie handling
(CVE-2013-2206)
* kernel/signal.c: stop info leak via the tkill and the tgkill syscalls
(CVE-2013-2141)
* HID: validate HID report id size (CVE-2013-2888)
* HID: check for NULL field when setting values
* Information leak in openvz quota implementation (CVE-2013-2239)
[ dann frazier ]
* HID: pantherlord: validate output report details (CVE-2013-2892)
-- dann frazier <email address hidden> Mon, 23 Sep 2013 12:36:26 -0600
linux-2.6 (2.6.32-48) stable; urgency=low
* [s390] s390/time: fix sched_clock() overflow (Closes: #698382)
* Revert "time: Avoid making adjustments if we haven't accumulated
anything" (Closes: #699112, regression in 2.6.32.60)
* exec: Fix accounting of execv*() memory after vfork() (Closes: #700486)
* r8169: Fix bugs that can cause an interface to hang
(possible fix for: #617220, #642025)
- r8169: missing barriers.
- r8169: fix unsigned int wraparound with TSO
- r8169: remove the obsolete and incorrect AMD workaround
-- Ben Hutchings <email address hidden> Thu, 14 Feb 2013 14:11:58 +0000
linux-2.6 (2.6.32-46) stable; urgency=high
[ Bastian Blank ]
* [s390] Enable IUCV special message support. (closes: #671238)
[ Ben Hutchings ]
* linux-image: Relax version dependency on linux-base, to simplify
testing of bug fixes
* [x86] linux-image: Fix minimum version of lilo (Closes: #680467)
* [openvz] proc: Fix extreme memory use for /proc/self/mountinfo in
container, thanks to Andrew Vagin, Christoph Lechleitner (Closes: #655385)
* usb: Fix deadlock in hid_reset when Dell iDRAC is reset (Closes: #670398)
* drm: Apply changes deferred from 2.6.32.42+drm33.19:
- drm: implement helper functions for scanning lru list
- drm/i915: Implement fair lru eviction across both rings. (v2)
- drm/i915: Maintain LRU order of inactive objects upon access by CPU (v2)
- drm/i915/evict: Ensure we completely cleanup on failure
* Add drm changes from 2.6.32.46+drm33.20, 2.6.32.48+drm33.21,
2.6.32.56+drm33.22, 2.6.32.57+drm33.23, 2.6.32.58+drm33.24
(Closes: #681632) including:
- drm/radeon/kms: prefer high post dividers in legacy pll algo
(Closes: #575893)
- drm: mm: fix range restricted allocations (regression in 2.6.32-36)
- drm/i915: no lvds quirk for AOpen MP45
* [armel/kirkwood] ahci: Add JMicron 362 device IDs (Closes: #634180)
* tcp: Don't change unlocked socket state in tcp_v4_err(). (Closes: #685087)
* locks: fix checking of fcntl_setlease argument
* sfc: Fix maximum number of TSO segments and minimum TX queue size
(CVE-2012-3412)
[ Jonathan Nieder ]
* ath5k: initialize default noise floor
* ath5k: use noise calibration from madwifi hal (Closes: #611107)
* sky2: Add 'legacy_pme' option for PCI legacy power management
(Closes: #647560; works around regression introduced in 2.6.32-22)
[ dann frazier ]
* Avoid leap second deadlock and early hrtimer/futex expiration issue
(Closes: #679882)
* net: sock: validate data_len before allocating skb in
sock_alloc_send_pskb() (CVE-2012-2136)
* dl2k: Clean up rio_ioctl, add missing CAP_NET_ADMIN checks (CVE-2012-2313)
* hfsplus: Fix potential buffer overflows (CVE-2012-2319)
* hugetlb: fix resv_map leak in error path (CVE-2012-2390)
* mm: fix vma_resv_map() NULL pointer (CVE-2012-2390)
* cred: copy_process() should clear child->replacement_session_keyring
(CVE-2012-2745)
* udf: Fix buffer overflow when parsing sparing table (CVE-2012-3400)
* rds: set correct msg_namelen (CVE-2012-3430)
-- dann frazier <email address hidden> Sun, 23 Sep 2012 04:22:37 +0900
| Deleted in experimental-release (Reason: None provided.) |
linux-2.6 (3.4.1-1~experimental.1) experimental; urgency=low
* New upstream release: http://kernelnewbies.org/Linux_3.4
* New upstream stable update:
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.1
[ maximilian attems ]
* Enable DM_VERITY, NF_CONNTRACK_TIMEOUT, NF_CT_NETLINK_TIMEOUT,
IP_NF_MATCH_RPFILTER, IP6_NF_MATCH_RPFILTER, NETFILTER_NETLINK_ACCT,
NETFILTER_XT_MATCH_NFACCT, NET_SCH_PLUG, SCSI_UFSHCD, SCSI_VIRTIO,
NET_TEAM, ATH6KL.
[ Ben Hutchings ]
* DFSG: Remove the new vs6624 driver, which contains non-free firmware
* aufs: Update to aufs3.4-20120521
* [rt] Update to 3.4-rt8 and reenable
-- maximilian attems <email address hidden> Wed, 06 Jun 2012 10:25:57 +0200
linux-2.6 (3.2.19-1) unstable; urgency=low
* New upstream stable update:
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.19
- hpsa: Fix problem with MSA2xxx devices (Closes: #661057)
- IB/core: Fix mismatch between locked and pinned pages
- iommu: Fix off by one in dmar_get_fault_reason()
- vfs: make AIO use the proper rw_verify_area() area helpers
- HID: logitech: read all 32 bits of report type bitfield (Closes: #671292)
- USB: Remove races in devio.c
- ext{3,4}: Fix error handling on inode bitmap corruption
- uvcvideo: Fix ENUMINPUT handling
- dl2k: Clean up rio_ioctl (CVE-2012-2313)
- [x86] MCE: Fix vm86 handling for 32bit mce handler
- [x86] mce: Fix check for processor context when machine check was taken.
- ethtool: Null-terminate filename passed to ethtool_ops::flash_device
- NFSv4: Fix buffer overflows in ACL support (CVE-2012-2375)
+ Avoid reading past buffer when calling GETACL
+ Avoid beyond bounds copy while caching ACL
[ Ben Hutchings ]
* be2net: Backport most changes up to Linux 3.5-rc1, thanks to
Sarveshwar Bandi (Closes: #673391)
- Add support for Skyhawk cards
* net/sched: Add codel and fq_codel from Linux 3.5-rc1
* [x86] udeb: Add hyperv-modules containing Hyper-V paravirtualised drivers
* [x86] ata_piix: defer disks to the Hyper-V drivers by default
* [x86] drm/i915:: Disable FBC on SandyBridge (Closes: #675022)
* AppArmor: compatibility patch for v5 interface (Closes: #661151)
* hugepages: fix use after free bug in "quota" handling (CVE-2012-2133)
* [x86] mm: pmd_read_atomic: fix 32bit PAE pmd walk vs pmd_populate SMP race
condition (CVE-2012-2373)
* hugetlb: fix resv_map leak in error path (CVE-2012-2390)
* [SCSI] fix scsi_wait_scan (Closes: #647436)
-- Ben Hutchings <email address hidden> Fri, 01 Jun 2012 13:15:48 +0100
linux-2.6 (3.2.18-1) unstable; urgency=low
* New upstream stable update:
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.18
- hugetlb: prevent BUG_ON in hugetlb_fault() -> hugetlb_cow()
- net: l2tp: unlock socket lock before returning from l2tp_ip_sendmsg
- [sparc] sparc64: Do not clobber %g2 in xcall_fetch_glob_regs().
- ext4: avoid deadlock on sync-mounted FS w/o journal
- brcm80211: smac: fix endless retry of A-MPDU transmissions
(Closes: #672891)
- target: Fix SPC-2 RELEASE bug for multi-session iSCSI client setups
- ALSA: hda/idt - Fix power-map for speaker-pins with some HP laptops
(Closes: #672582)
- usbnet: fix skb traversing races during unlink(v2)
- [arm] prevent VM_GROWSDOWN mmaps extending below FIRST_USER_ADDRESS
[ Jonathan Nieder ]
* wacom: Add support for various tablet models (Closes: #671801)
* rt2800usb: Add support for Ralink RT5392/RF5372 chipset (Closes: #673186)
[ Ben Hutchings ]
* test-patches: Fix -j option, broken since 3.1.0-1~experimental.1
* rt2800usb: Re-enable powersaving by default, as it should work better
than in 2.6.38
* [sparc,sparc64] Build virtio-modules-udeb for use in qemu (Closes: #673320)
* KVM: mmu_notifier: Flush TLBs before releasing mmu_lock
* [x86] KVM: nVMX: Fix erroneous exception bitmap check
* [x86] KVM: VMX: vmx_set_cr0 expects kvm->srcu locked
* [s390] KVM: do store status after handling STOP_ON_STOP bit
* [s390] KVM: Sanitize fpc registers for KVM_SET_FPU
* ACPI battery: only refresh the sysfs files when pertinent information
changes (Closes: #670958)
-- Ben Hutchings <email address hidden> Mon, 21 May 2012 04:07:08 +0100
| Deleted in experimental-release (Reason: None provided.) |
linux-2.6 (3.3.6-1~experimental.1) experimental; urgency=low
* New upstream stable update:
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.5
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.6
- USB: cdc-wdm: fix race leading leading to memory corruption
- autofs: make the autofsv5 packet file descriptor use a packetized pipe
(Closes: #633423)
- PM / Hibernate: fix the number of pages used for hibernate/thaw buffering
(Closes: #659363)
- efi: Validate UEFI boot variables
- efivars: Improve variable validation
- fs/cifs: fix parsing of dfs referrals
- hfsplus: Fix potential buffer overflows (CVE-2012-2319)
- exit_signal: fix the "parent has changed security domain" logic
- net: l2tp: unlock socket lock before returning from l2tp_ip_sendmsg
- sky2: fix receive length error in mixed non-VLAN/VLAN traffic
(Closes: #492853)
- [s390] KVM: do store status after handling STOP_ON_STOP bit
- [s390] KVM: Sanitize fpc registers for KVM_SET_FPU
- KVM: Fix write protection race during dirty logging
- KVM: mmu_notifier: Flush TLBs before releasing mmu_lock
- KVM: Ensure all vcpus are consistent with in-kernel irqchip settings
(CVE-2012-1601)
- KVM: nVMX: Fix erroneous exception bitmap check
- KVM: VMX: Fix kvm_set_shared_msr() called in preemptible context
- KVM: lock slots_lock around device assignment
- hugepages: fix use after free bug in "quota" handling
-- Ben Hutchings <email address hidden> Fri, 18 May 2012 03:53:16 +0100
linux-2.6 (3.2.17-1) unstable; urgency=low
* New upstream stable update:
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.17
- md: fix possible corruption of array metadata on shutdown.
- ext4: fix endianness breakage in ext4_split_extent_at()
- KVM: unmap pages from the iommu when slots are removed (CVE-2012-2121)
- btrfs: btrfs_root_readonly() broken on big-endian
- ocfs2: Fix various bugs affecting big-endian architectures
- lockd: fix the endianness bug
- phonet: Check input from user before allocating
- netlink: fix races after skb queueing
- net: fix a race in sock_queue_err_skb()
- net/ethernet: ks8851_mll fix rx frame buffer overflow
- x86, apic: APIC code touches invalid MSR on P5 class machines
- drm/i915: fix integer overflow in i915_gem_execbuffer2()
- drm/i915: fix integer overflow in i915_gem_do_execbuffer()
- USB: cdc-wdm: fix race leading leading to memory corruption
- autofs: make the autofsv5 packet file descriptor use a packetized pipe
(Closes: #633423)
- efi: Validate UEFI boot variables
- efivars: Improve variable validation
- fs/cifs: fix parsing of dfs referrals
- hfsplus: Fix potential buffer overflows (CVE-2012-2319)
- exit_signal: fix the "parent has changed security domain" logic
[ Ben Hutchings ]
* aufs: Enable AUFS_EXPORT
* ext4: Report max_batch_time option correctly (Closes: #654206)
* [i386/rt-686-pae] Enable HIGHMEM64G as intended for this configuration
* NFSv4: Revalidate uid/gid after open (Closes: #659111)
* sky2: propogate rx hash when packet is copied
* sky2: fix receive length error in mixed non-VLAN/VLAN traffic
(Closes: #492853)
* KVM: Ensure all vcpus are consistent with in-kernel irqchip settings
(CVE-2012-1601)
* KVM: lock slots_lock around device assignment (CVE-2012-2121)
* [rt] bump version to 3.2.16-rt27
[ Bastian Blank ]
* [s390] Enable IUCV special message support. (closes: #671238)
[ Arnaud Patard ]
* [armhf] Add vexpress support from Vagrant Cascadian with a slightly
modified kernel configuration (Closes: #670462)
* [armel] Introduce a new udeb module for leds and use it on kirkwoord
kernel thanks to Simon Guinot (Closes: #671200)
-- Ben Hutchings <email address hidden> Sat, 12 May 2012 15:29:09 +0100
linux-2.6 (2.6.32-45) stable; urgency=high
* Avoid ABI change on some archs due to a new #include in the
fix for CVE-2012-2123.
-- dann frazier <email address hidden> Sat, 05 May 2012 11:39:28 -0600
| Superseded in experimental-release |
linux-2.6 (3.3.4-1~experimental.1) experimental; urgency=low
* New upstream stable update:
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.3
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.4
[ Ben Hutchings ]
* [x86] dell-laptop: Terminate quirks list properly
-- Ben Hutchings <email address hidden> Tue, 01 May 2012 01:23:59 +0100
linux-2.6 (3.2.16-1) unstable; urgency=low
* New upstream stable update:
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.16
- drm/i915: properly compute dp dithering for user-created modes
(Closes: #666360)
- md/bitmap: prevent bitmap_daemon_work running while initialising bitmap
- [ia64] Fix futex_atomic_cmpxchg_inatomic() (Closes: #659485)
- USB: serial: fix race between probe and open
- fcaps: clear the same personality flags as suid when fcaps are used
(CVE-2012-2123)
- ACPICA: Fix to allow region arguments to reference other scopes
(Closes: #661581)
- futex: Do not leak robust list to unprivileged process
- drm/radeon/kms: fix the regression of DVI connector check
(Closes: #670047)
[ Ben Hutchings ]
* rt2x00: Identify rt2800usb chipsets. (Closes: #658067)
* [x86] Add EFI boot stub support (Closes: #669033)
* brcmsmac: "INTERMEDIATE but not AMPDU" only when tracing
* NFSv4: Fix error handling and improve error reporting for file locking
(Closes: #669270)
- Rate limit the state manager for lock reclaim warning messages
- Ensure that the LOCK code sets exception->inode
- Ensure that we check lock exclusive/shared type against open modes
* [x86] i915: Fix integer overflows in i915_gem_{do_execbuffer,execbuffer2}
* Revert "autofs: work around unhappy compat problem on x86-64".
Reopens #633423.
-- Ben Hutchings <email address hidden> Sun, 29 Apr 2012 08:00:53 +0100
| Deleted in experimental-release (Reason: None provided.) |
linux-2.6 (3.3.2-1~experimental.1) experimental; urgency=low
* New upstream stable update:
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.1
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.2
[ Ben Hutchings ]
* [armel/iop32x] Add missing #includes (fixes FTBFS)
-- Ben Hutchings <email address hidden> Sun, 15 Apr 2012 16:36:13 +0100
linux-2.6 (3.2.15-1) unstable; urgency=high
* New upstream stable update:
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.15
- drm/radeon/kms: fix fans after resume (Closes: #596741)
- sysctl: fix write access to dmesg_restrict/kptr_restrict
- [x86] PCI: use host bridge _CRS info on MSI MS-7253 (Closes: #619034)
- nfs: Fix length of buffer copied in __nfs4_get_acl_uncached
- [x86] ioat: fix size of 'completion' for Xen (Closes: #660554)
- cred: copy_process() should clear child->replacement_session_keyring
[ Ben Hutchings ]
* net: fix /proc/net/dev regression (Closes: #659499)
* [armel/orion5x] Fix GPIO enable bits for MPP9 (Closes: #667446)
* [x86] drm/i915: mask transcoder select bits before setting them on LVDS
* [armhf/mx5,mipsel/loongson-2f] input: Enable INPUT_TOUCHSCREEN
(Closes: #668036)
* [x86] hv: Update all Hyper-V drivers to 3.4-rc1 (Closes: #661318)
* hugetlb: fix race condition in hugetlb_fault()
-- Ben Hutchings <email address hidden> Sat, 14 Apr 2012 18:23:44 +0100
linux-2.6 (3.2.14-1) unstable; urgency=low
* New upstream stable update:
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.14
- mm: thp: fix pmd_bad() triggering in code paths holding mmap_sem
read mode (CVE-2012-1179)
- hugetlbfs: avoid taking i_mutex from hugetlbfs_read()
- md/bitmap: ensure to load bitmap when creating via sysfs
(Closes: #661558)
- md: dont set md arrays to readonly on shutdown
- md/raid1,raid10: avoid deadlock during resync/recovery (Closes: #584881)
- md: fix clearing of the changed flags for the bad blocks list
- xfs: fix inode lookup race
- sysctl: protect poll() in entries that may go away
- NFSv4: Rate limit the state manager warning messages (Closes: #666121)
- jbd2: clear BH_Delay & BH_Unwritten in journal_unmap_buffer
- ext4: ignore EXT4_INODE_JOURNAL_DATA flag with delalloc
- ext4: fix race between sync and completed io work
- ext4: check for zero length extent
- vfs: fix d_ancestor() case in d_materialize_unique
- udf: Fix deadlock in udf_release_file()
- dm crypt: add missing error handling
- dm thin: fix stacked bi_next usage
- xfs: Fix oops on IO error during xlog_recover_process_iunlinks()
- NFSv4: Fix two infinite loops in the mount code
- drm/i915: suspend fbdev device around suspend/hibernate
(Closes: #645547)
- net: fix a potential rcu_read_lock() imbalance in rt6_fill_node()
- [x86] tls: Off by one limit check
- PCI: ASPM: Fix pcie devices with non-pcie children (Closes: #665420)
[ Jonathan Nieder ]
* ata: Enable PATA_IT8213 as module (Closes: #666506)
-- Ben Hutchings <email address hidden> Thu, 05 Apr 2012 05:02:45 +0100
linux-2.6 (3.2.13-1) unstable; urgency=low
* New upstream stable update:
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.13
[ Ben Hutchings ]
* kbuild: do not check for ancient modutils tools
[ Uwe Kleine-König ]
* [rt] bump version to 3.2.12-rt22
[ Bastian Blank ]
* [s390x] Ignore ABI change.
-- Bastian Blank <email address hidden> Wed, 28 Mar 2012 13:40:26 +0200
| Superseded in experimental-release |
linux-2.6 (3.3-1~experimental.1) experimental; urgency=low * New upstream release: http://kernelnewbies.org/Linux_3.3 [ Ben Hutchings ] * [x86] crypto: Enable CRYPTO_SERPENT_SSE2_586, CRYPTO_SERPENT_SSE2_X86_64 * aufs: Update to aufs3.x-rcN-20120312 * IB: Enable INFINIBAND_SRPT as module (Closes: #663041) -- Ben Hutchings <email address hidden> Wed, 21 Mar 2012 03:08:36 +0000
linux-2.6 (3.2.12-1) unstable; urgency=high
* New upstream stable update:
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.11
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.12
- aio: fix io_setup/io_destroy race
- aio: fix the "too late munmap()" race
- vfs: fix double put after complete_walk()
- acer-wmi: No wifi rfkill on Lenovo machines (Closes: #655941)
- tcp: fix false reordering signal in tcp_shifted_skb
- r8169: corrupted IP fragments fix for large mtu
- tcp: don't fragment SACKed skbs in tcp_mark_head_lost()
- tcp: fix tcp_shift_skb_data() to not shift SACKed data below snd_una
- block: Fix NULL pointer dereference in sd_revalidate_disk
(Closes: #649735)
- block: fix __blkdev_get and add_disk race condition
[ Ben Hutchings ]
* [powerpc] Enable KVM_GUEST
* [s390] Ignore arch_pick_mmap_layout version change; it should not be
needed by modules (fixes FTBFS)
* [x86] Disable POHMELFS; this version is obsolete
* epoll: Don't limit non-nested epoll paths
* CIFS: Fix a spurious error in cifs_push_posix_locks
* [rt] bump rt patch to version 3.2.11-rt20
* aufs: Update to aufs3.2-20120312
* tcp: fix syncookie regression
* ipv6: Don't dev_hold(dev) in ip6_mc_find_dev_rcu
[ Jonathan Nieder ]
* [x86] Enable RTS5139 as module (Closes: #663912)
-- Ben Hutchings <email address hidden> Tue, 20 Mar 2012 04:32:51 +0000
linux-2.6 (3.2.10-1) unstable; urgency=high
* New upstream stable update:
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.10
- regset: Prevent null pointer reference on readonly regsets
(CVE-2012-1097)
[ Uwe Kleine-König ]
* [rt] bump rt patch to version 3.2.9-rt17
* [rt] fix conflict between the security restrictions on links introduced in
3.2.9-1 and rt (Closes: #663269)
[ Aurelien Jarno ]
* [mips,mipsel] Mark ext4-modules as provided by the kernel-image udeb, remove
ide-core-modules provide.
[ Ben Hutchings ]
* [x86,ia64] PCI/hotplug: Build-in common hotplug drivers:
- Change HOTPLUG_PCI, HOTPLUG_PCI_PCIE to built-in
- [x86] Change HOTPLUG_PCI_ACPI to built-in (Closes: #663433)
- [ia64] Enable HOTPLUG_PCI_SGI as built-in
* linux-headers: Remove unused, broken symlinks to Kbuild (Closes: #663597)
* udeb: Remove dependency of {pcmcia,usb}-storage-modules on ide-core-modules
* [mips,mipsel] Mark ata-modules as provided by the kernel-image udeb
for most flavours
-- Bastian Blank <email address hidden> Tue, 13 Mar 2012 17:19:32 +0100
linux-2.6 (2.6.26-29) oldstable; urgency=high
* Revert: [powerpc] oprofile: Handle events that raise an exception without
overflowing (CVE-2011-4347).
-- dann frazier <email address hidden> Sat, 03 Mar 2012 22:24:34 -0700
| Superseded in experimental-release |
linux-2.6 (3.3~rc6-1~experimental.1) experimental; urgency=low * New upstream release candidate [ Ben Hutchings ] * aufs: Update to aufs3.x-rcN-20120123 * rt: Disable until it is updated for Linux 3.3 or later -- Ben Hutchings <email address hidden> Sun, 04 Mar 2012 20:27:42 +0000
linux-2.6 (3.2.9-1) unstable; urgency=high
* New upstream stable update:
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.8
- [i386] i387: move TS_USEDFPU flag from thread_info to task_struct
- [x86] additional refactoring of FPU/SSE state save and restore
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.9
- vfs: fix d_inode_lookup() dentry ref leak
- target: Allow control CDBs with data > 1 page
- epoll: introduce POLLFREE to flush ->signalfd_wqh before kfree()
- epoll: ep_unregister_pollwait() can use the freed pwq->whead
- epoll: limit paths (CVE-2011-1083)
- cdrom: use copy_to_user() without the underscores
[ Bastian Blank ]
* [mips,mipsel] Also remove ext4 modules from installer.
[ Ben Hutchings ]
* Update debconf template translations:
- Update Dutch (Willem Kuyn) (Closes: #658736)
- Add Polish (Michał Kułach) (Closes: #658912)
* Bump ABI to 2
* fs: Introduce and enable security restrictions on links:
- Do not follow symlinks in /tmp that are owned by other users
(sysctl: fs.protected_symlinks)
- Do not allow unprivileged users to create hard links to sensitive files
(sysctl: fs.protected_hardlinks) (Closes: #609455)
+ This breaks the 'at' package in stable, which will be fixed shortly
(see #597130)
The precise restrictions are specified in Documentation/sysctl/fs.txt in
the linux-doc-3.2 and linux-source-3.2 packages.
* iwlwifi: fix key removal (Closes: #651199)
* cgroups: Set CGROUP_PERF
* hid: Enable HID_HOLTEK, HID_PRIMAX, HID_SPEEDLINK, HID_WIIMOTE as modules,
HID_ACRUX_FF
* media/rc: Enable RC_ATI_REMOTE as module
* gspca: Enable USB_GSPCA_TOPRO as module
* dvb-usb: Enable DVB_USB_PCTV452E, DVB_USB_MXL111SF as modules
[ Uwe Kleine-König ]
* [x86] Update rt featureset to 3.2.9-rt15
-- Ben Hutchings <email address hidden> Sun, 04 Mar 2012 15:32:20 +0000
linux-2.6 (3.2.7-1) unstable; urgency=low
* New upstream stable update:
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.7
[ Ben Hutchings ]
* Add Turkish debconf template translations (Mert Dirik) (Closes: #660117)
* [amd64] Disable BLK_DEV_IDEPNP, BLK_DEV_OPTI621, IDE_GENERIC
* Use libata-based drivers for most of the remaining PATA controllers:
- pata_legacy replaces ide-generic
- pata_isapnp replaces ide-pnp
- pata_opti replaces opti621
- pata_hpt366 and pata_hpt37x replace hpt366
- pata_ninja32 replaces delkin_cb
- pata_cs5535 replaces cs5535
- pata_winbond replaces sl82c105
- [alpha] pata_cypress replaces cy82c693
- [hppa] pata_ns87415 replaces ns87415
- [sparc] Various replacements, as for x86 in 2.6.32-10
* Disable old IDE subsystem [!ia64,m68k]:
- Disable BLK_DEV_IT8172, BLK_DEV_IT8213, BLK_DEV_TC86C001, BLK_DEV_TRM290
- [alpha] Disable BLK_DEV_4DRIVES, BLK_DEV_ALI14XX, BLK_DEV_DTC2278,
BLK_DEV_HT6560B, BLK_DEV_QD65XX, BLK_DEV_UMC8672
* fs: Enable EFI_PARTITION in all configurations (Closes: #660582)
* [i386] Re-enable INTEL_IOMMU, IRQ_REMAP
* [mips/r5k-ip32] Enable INPUT_SGI_BTNS (previously INPUT_SGIO2_BTNS)
* [powerpc/powerpc64] Enable IBM_EMAC (previously IBM_NEW_EMAC)
* [x86] drm/i915: do not enable RC6p on Sandy Bridge (Closes: #660265)
* ipsec: be careful of non existing mac headers (Closes: #660804)
* version: Use maintainer rather than uploader address for official
binary packages
[ Bastian Blank ]
* Don't advertise Xen support for rt images. (closes: #659988)
* [m68k,mips,mipsel] Use ext4 for all ext-variants. (closes: #660446)
* [m68k,mips,mipsel] Don't built-in ramdisk support.
* [hppa,mips,mipsel] Don't built-in cramfs support.
* [alpha,hppa] Don't built-in ext2.
* Remove IDE trigger for LED support.
* Remove all framebuffer bootup logos.
* NFSv4: Fix an Oops in the NFSv4 getacl code.
-- Bastian Blank <email address hidden> Tue, 28 Feb 2012 16:00:41 +0100
linux-2.6 (3.2.6-1) unstable; urgency=low
* New upstream stable update:
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.5
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.6
- ALSA: hda - Apply 0x0f-VREF fix to all ASUS laptops with ALC861/660
(Closes: #657302)
- [armhf] vfp: flush thread hwstate before restoring context from sigframe
- proc: mem_release() should check mm != NULL
- proc: make sure mem_open() doesnt pin the targets memory
- [arm] sched/rt: Fix task stack corruption under
__ARCH_WANT_INTERRUPTS_ON_CTXSW
- eCryptfs: Infinite loop due to overflow in ecryptfs_write()
- iscsi-target: Fix reject release handling in iscsit_free_cmd()
- iscsi-target: Fix double list_add with iscsit_alloc_buffs reject
- pcmcia: fix socket refcount decrementing on each resume
[ Aurelien Jarno ]
* hwmon: backport IT8728F support for linux 3.3.
[ Uwe Kleine-König ]
* [amd64] Update rt featureset to 3.2.5-rt12
* [i386] enable rt featureset for 686-pae
[ Arnaud Patard ]
* Merge ixp4xx oops fix when probing mtd.
[ Ben Hutchings ]
* Change linux-image dependencies to allow kmod as an alternative to
module-init-tools
* relay: prevent integer overflow in relay_open()
* builddeb: Don't create files in /tmp with predictable names
* ath9k: fix a WEP crypto related regression (Closes: #659484)
-- Ben Hutchings <email address hidden> Thu, 16 Feb 2012 02:38:38 +0000
linux-2.6 (3.2.4-1) unstable; urgency=low
* New upstream stable update:
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.3
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.4
- eCryptfs: Sanitize write counts of /dev/ecryptfs
- eCryptfs: Make truncate path killable
- eCryptfs: Check inode changes in setattr
- drm/i915: paper over missed irq issues with force wake voodoo
- tpm_tis: add delay after aborting command (Closes: #649033)
- USB: ftdi_sio: fix initial baud rate (Closes: #658164)
- USB: Realtek cr: fix autopm scheduling while atomic (Closes: #656724)
[ Ben Hutchings ]
* [armel] Add mv78xx0 flavour; thanks to Steve McIntyre for the config
* net: Disable FIXED_PHY; this driver only causes trouble
* PCI: Rework ASPM disable code (fixes power usage regression on some
systems)
[ Bastian Blank ]
* Remove unneeded scmversion workaround.
-- Bastian Blank <email address hidden> Sun, 05 Feb 2012 15:42:21 +0100
linux-2.6 (3.2.2-1) unstable; urgency=low
* New upstream stable update:
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.2
- ext4: fix undefined behavior in ext4_fill_flex_info() (CVE-2009-4307)
- Unused iocbs in a batch should not be accounted as active (CVE-2012-0058)
- uvcvideo: Fix integer overflow in uvc_ioctl_ctrl_map()
- [arm] proc: clear_refs: do not clear reserved pages
[ Ben Hutchings ]
* Clean up linux-image maintainer scripts:
- Stop changing 'build' and 'source' symlinks; these now belong to the
linux-headers packages
- Remove unused configuration variables
- prerm: Remove last vestige of /usr/doc transition
- postrm: Remove modules.*.bin; currently modules.builtin.bin is left
behind
* [alpha] Build with gcc-4.5 (Closes: #657112)
* aufs: Update to aufs3.2-20120109 (fixes FTBFS on m68k)
* [m68k] Fix assembler constraint to prevent overeager gcc optimisation
* sdhci-pci: Include driver in installer
* [armel] udeb: Do not attempt to build lzo-modules udeb as lzo_compress
is now built-in (fixes FTBFS)
* [armhf] udeb: Include rt2800usb in nic-modules, replacing rt2870sta
which was removed from the kernel
* drm: Fix authentication kernel crash
* xfs: Fix missing xfs_iunlock() on error recovery path in xfs_readlink()
* jbd: Issue cache flush after checkpointing
* crypto: sha512 - make it work, undo percpu message schedule
- crypto: sha512 - reduce stack usage to safe number
* [x86] xen: size struct xen_spinlock to always fit in arch_spinlock_t
* l2tp: l2tp_ip - fix possible oops on packet receive
* macvlan: fix a possible use after free
* tcp: fix tcp_trim_head() to adjust segment count with skb MSS
* [x86] KVM: fix missing checks in syscall emulation (CVE-2012-0045)
[ Thorsten Glaser ]
* [m68k] Use gcc-4.6 like (almost) all other architectures
* Pass the cflags define as CFLAGS_KERNEL and CFLAGS_MODULE to kbuild
* [m68k] Use cflags -ffreestanding (Closes: #648996)
[ Aurelien Jarno ]
* [mips,octeon] Disabled CONFIG_FIXED_PHY as it conflicts with the octeon
phy driver.
-- Ben Hutchings <email address hidden> Wed, 01 Feb 2012 01:44:05 +0000
linux-2.6 (2.6.32-41) stable; urgency=low
[ Ben Hutchings ]
* ipv6: make fragment identifications less predictable (CVE-2011-2699)
- fix NULL dereference in udp6_ufo_fragment (see #643817)
* Add longterm release 2.6.32.52:
- Revert "clockevents: Set noop handler in clockevents_exchange_device()",
included in stable update 2.6.32.50 (Closes: #653398)
* Add longterm release 2.6.32.53, including:
- cfq-iosched: fix cfq_cic_link() race confition
For the complete list of changes, see:
http://www.kernel.org/pub/linux/kernel/v2.6/longterm/v2.6.32/ChangeLog-2.6.32.53
and the bug report which this closes: #655049.
* Add longterm release 2.6.32.54, including:
- drivers/usb/class/cdc-acm.c: clear dangling pointer
- asix: fix infinite loop in rx_fixup()
- SCSI: scsi_dh: check queuedata pointer before proceeding further
- xfs: validate acl count; fix acl count validation (CVE-2012-0044)
For the complete list of changes, see:
http://www.kernel.org/pub/linux/kernel/v2.6/longterm/v2.6.32/ChangeLog-2.6.32.54
and the bug report which this closes: #655816.
* Refine the fix for CVE-2011-4127, based on mainline Linux:
- Do not restrict processes that have CAP_SYS_RAWIO
- Log a warning when an ioctl is forbidden (with rate-limiting,
and excluding CDROM_GET_CAPABILITY)
- Fix the ide-floppy and ub drivers
- Fix the ub driver properly (not included in Debian configurations)
[ Ian Campbell ]
* xen: Set XEN_MAX_DOMAIN_MEMORY to 70G for 64 bit domains. (Closes: #645052)
[ Jonathan Nieder ]
* [x86] ACPI: fix corrupt DSDT by enabling acpi=copy_dsdt automatically on
more known-bad Toshiba models (Closes: #598104)
[ Arnaud Patard ]
* [armel] Backport 88f6282 from mainline (Closes: #655316)
-- Ben Hutchings <email address hidden> Sun, 15 Jan 2012 03:37:31 +0000
linux-2.6 (3.2.1-2) unstable; urgency=high
[ Stefan Lippers-Hollmann ]
* udeb: Add missing modules to nic-wireless-modules:
- lib80211 encryption algorithms (lib80211_crypt_{wep,ccmptkip})
needed for e.g. ipw2x00 wlan modules (Closes: #636259)
- ath9k_htc, carl9170 and rt2800{pci,usb} drivers
(Closes: #636321, #636353, #636385)
[ Ben Hutchings ]
* Update Vcs-Browser URL for the switch to ViewVC
* Point Vcs-{Svn,Browser} at trunk branch, since the sid branch does
not always exist
* Build linux-libc-dev without multiarch if dpkg does not support it,
to support backports
* proc: clean up and fix /proc/<pid>/mem handling (CVE-2012-0056)
[ Aurelien Jarno ]
* [x86] Backport KVM nested VMX fixes from 3.3 to fix warnings and
crashes of L1 guests.
-- Ben Hutchings <email address hidden> Mon, 23 Jan 2012 15:10:04 +0000
linux-2.6 (3.2.1-1) unstable; urgency=low
* New upstream release: http://kernelnewbies.org/Linux_3.2
* New upstream stable update:
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.1
[ Aurelien Jarno ]
* [arm, mips, mipsel, sh4] Add a virtio-modules udeb on flavours which
can be emulated by QEMU.
[ Ben Hutchings ]
* media/dvb: Enable DVB_USB_IT913X as module (Closes: #653776)
* [arm] Remove use of possibly undefined BUILD_BUG_ON in <asm/bug.h>
(fixes FTBFS)
* Install /lib/modules/<kernel-version>/modules.builtin in linux-image
packages
* [ia64] Add accept4() syscall (Closes: #647825)
* [x86] staging: Enable STAGING_MEDIA, which various drivers now depend on
(Closes: #654800)
* [um,m68k] Register a generic CPU device (fixes regression introduced by
the fix for #649216)
* [alpha] add io{read,write}{16,32}be functions, thanks to Michael Cree
* net: reintroduce missing rcu_assign_pointer() calls
* Input: ALPS - add support for protocol versions 3 and 4
(Closes: #618422, #648207)
* [powerpc/powerpc64] udeb: Drop zlib-modules; ZLIB_DEFLATE is built-in
* [amd64] iommu: Enable INTEL_IOMMU, INTEL_IOMMU_FLOPPY_WA, IRQ_REMAP
* [amd64] cpufreq: Enable X86_P4_CLOCKMOD (Closes: #656328)
* Refresh list of related firmware packages for bug script
[ Bastian Blank ]
* [amd64] crypt: Enable some amd64 only ciphers.
* Packaging updates:
- Use unicode.
- Cleanup config handling.
- Remove support for plain-xen image type.
- Allow disabling debug infos for unreleased builds.
[ Arnaud Patard ]
* [armel] disable tomoyo and apparmor to allow kernel image to fit into flash.
* [armel] add back ixp4xx gpiolib patch
* [arm] backport topdown mmap support from rmk's tree
* [armel] Enable support from LaCIE kirkwood devices, thanks to Simon Guinot
(Closes: #655344)
* [armel] Backport 88f6282 A1 support
[ Jurij Smakov ]
* [sparc] Add mpt2sas to scsi-common-modules udeb on sparc and sparc64,
needed by Niagara T3 machines.
-- Ben Hutchings <email address hidden> Wed, 18 Jan 2012 16:14:12 +0000
linux-2.6 (3.1.8-2) unstable; urgency=high
* igmp: Avoid zero delay when receiving odd mixture of IGMP queries
(Closes: #654876) (CVE-2012-0207)
-- Ben Hutchings <email address hidden> Tue, 10 Jan 2012 00:14:39 +0000
linux-2.6 (3.1.8-1) unstable; urgency=low
* New upstream stable update:
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.7
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.8
- Revert "clockevents: Set noop handler in clockevents_exchange_device()",
included in stable update 3.1.5 (Closes: #653398)
- cfq-iosched: fix cfq_cic_link() race condition
- binary_sysctl(): fix memory leak
- cgroups: fix a css_set not found bug in cgroup_attach_proc
- iwlwifi: allow to switch to HT40 if not associated (Closes: #653423)
- futex: Fix uninterruptible loop due to gate_area
- drm/radeon/kms: bail on BTC parts if MC ucode is missing
- [sparc] sparc64: Fix masking and shifting in VIS fpcmp emulation.
- llc: llc_cmsg_rcv was getting called after sk_eat_skb.
- ipv4: reintroduce route cache garbage collector
- Revert "rtc: Disable the alarm in the hardware" (Closes: #652869)
[ Ben Hutchings ]
* snapshot: Implement compat_ioctl (Closes: #502816)
* drm/radeon: flush read cache for gtt with fence on r6xx and newer GPU
(Closes: #646376)
* rtc: Fix alarm rollover when day or month is out-of-range (Closes: #646429)
* l2tp: ensure sk->dst is still valid (Closes: #652503)
* Update Russian debconf template translations (Yuri Kozlov)
(Closes: #653716)
* v4l2-ioctl: integer overflow in video_usercopy()
* Restrict ioctl forwarding on partitions and logical volumes (CVE-2011-4127)
* [x86] KVM: Prevent starting PIT timers in the absence of irqchip support
(CVE-2011-4622)
[ Jonathan Nieder ]
* prerm: Print an error message when aborting removal of the running
kernel (Closes: #601962)
[ Aurelien Jarno ]
* [sh4] Remove core-modules udeb as it is empty.
* [sh4/sh7751r] Disable CONFIG_RTS7751R2D_1. Support for this board
implies IRQless IDE, which causes data corruption.
-- Ben Hutchings <email address hidden> Sun, 08 Jan 2012 16:31:16 +0000
| Deleted in experimental-release (Reason: None provided.) |
linux-2.6 (3.2~rc7-1~experimental.1) experimental; urgency=low
* New upstream release candidate
- [powerpc] pasemi_mac: Fix building as module
- [x86] mpparse: Account for bus types other than ISA and PCI
(Closes: #586494)
- EHCI : Fix a regression in the ISO scheduler (Closes: #651382)
- [arm] setup: initialize arm_dma_zone_size earlier (Closes: #651215)
[ Ben Hutchings ]
* [x86] et131x: Include driver in installer (Closes: #651440)
* security: Enable APPARMOR (Closes: #598408)
[ Uwe Kleine-König ]
* [amd64] Update rt featureset to 3.2-rc5-rt8
[ Bastian Blank ]
* Use xz compression for all packages.
-- Bastian Blank <email address hidden> Wed, 28 Dec 2011 14:55:38 +0100
linux-2.6 (3.1.6-1) unstable; urgency=low
* New upstream stable update:
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.6
- staging: r8712u: Add new USB ID (Closes: #651622)
- [arm] setup: initialize arm_dma_zone_size earlier (Closes: #651215)
[ Ben Hutchings ]
* [x86] Enable HYPERV, HYPERV_STORAGE, HYPERV_NET, HYPERV_UTILS,
HYPERV_MOUSE as modules (Closes: #652014)
* cciss: Add IRQF_SHARED back in for the non-MSI(X) interrupt handler
(Closes: #650119)
* udeb: Update configuration:
- Provide the default configuration instead of including it from the
kernel-wedge package
- [x86] Include et131x (Closes: #651440)
- [x86] Include isci (Closes: #652897)
-- Bastian Blank <email address hidden> Fri, 23 Dec 2011 17:02:26 +0100
linux-2.6 (3.1.5-1) unstable; urgency=low
* New upstream stable update:
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.5
- bridge: correct IPv6 checksum after pull (Closes: #651469)
- USB: EHCI: fix HUB TT scheduling issue with iso transfer
(Closes: #651015)
- [x86] mpparse: Account for bus types other than ISA and PCI
(Closes: #586494)
[ Bastian Blank ]
* Fix generation of revisions for the patch list.
[ Hector Oron ]
* regulator: backport fix for nullpointer dereference in core.
[ Ben Hutchings ]
* [x86] Enable MEMTEST (Closes: #613321, #646361)
- If bad RAM is detected, WARN and recommend a more thorough test
* brcmsmac: Fix I/O functions for MIPS and for big-endian architectures
* [x86] Enable GPIO_PCH, GPIO_ML_IOH, I2C_EG20T, PCH_CAN, PCH_DMA,
PCH_GBE, PCH_PHUB, SERIAL_PCH_UART, SPI_TOPCLIFF_PCH, USB_GADGET,
USB_EG20T as modules
-- Ben Hutchings <email address hidden> Sun, 11 Dec 2011 05:28:40 +0000
| Superseded in experimental-release |
linux-2.6 (3.2~rc4-1~experimental.1) experimental; urgency=low
* New upstream release candidate
[ Ben Hutchings ]
* aufs: Update to aufs3.x-rcN-20111114
* ieee802154: Enable IEEE802154_6LOWPAN as module
* can: Enable CAN_GW, CAN_EMS_PCMCIA, CAN_PEAK_PCI as modules
* nfc: enable NFC_NCI as module
* scsi: Enable MVUMI as module
* dm: Enable DM_THIN_PROVISIONING as module
* b43: Enable B43_PHY_HT
* [ia64,powerpc,sparc,x86] wireless: Enable MWIFIEX_PCIE as module
* udeb: Update configuration for 3.2:
- Provide the default configuration instead of including it from the
kernel-wedge package
- iwlagn is renamed to iwlwifi
- blowfish is renamed to blowfish_generic
[ Uwe Kleine-König ]
* [amd64] reenable rt featureset with 3.2-rc4-rt5
-- Ben Hutchings <email address hidden> Sat, 03 Dec 2011 23:07:41 +0000
linux-2.6 (3.1.4-1) unstable; urgency=low
* New upstream stable updates:
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.2
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.3
- TTY: ldisc, wait for ldisc infinitely in hangup (Closes: #645071)
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.4
[ Martin Michlmayr ]
* [armel] Set the priority of pata-modules to standard since the
GLAN Tank uses PATA.
[ Ben Hutchings ]
* Enable BCMA as module, BCMA_HOST_PCI and B43_BCMA (Closes: #649567)
but limit these to devices not supported by brcmsmac
* brcmsmac: Enable as module for all architectures
* Include module taint flags in bug reports
* lirc_serial: Fix various bugs that may result in a crash, deadlock or
other failure (Closes: #645811)
* amilo-rfkill: Use proper functions to write to the i8042 safely
* topology: Provide CPU topology in sysfs in !SMP configurations
(Closes: #649216)
[ Bastian Blank ]
* Include generated headers. (closes: #650085)
-- Bastian Blank <email address hidden> Tue, 29 Nov 2011 14:14:14 +0100
linux-2.6 (3.1.1-1) unstable; urgency=high
* New upstream stable update:
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.1
[ Aurelien Jarno ]
* [s390x] Add s390x udebs, based on linux-kernel-di-s390x-2.6.
* [sparc64] Sync udebs with sparc.
[ Ben Hutchings ]
* [powerpc] Fix module selection for {ata,ide,scsi-core}-modules udebs
* [alpha] wire up accept4 syscall, thanks to Michael Cree
* iwlagn: fix modinfo display for 135 ucode (Closes: #647958)
* [powerpc] ptrace: Fix build with gcc 4.6
* [arm] add io{read,write}{16,32}be functions (fixes FTBFS)
* cifs, freezer: add wait_event_freezekillable and have cifs use it
(Closes: #488794)
* [alpha] Remove old, broken udeb configuration (Closes: #647586)
* DFSG: Remove drivers/staging/ft1000/ft1000-*/*.img, non-free
firmware for drivers we don't build
* hfs: fix hfs_find_init() sb->ext_tree NULL ptr oops (CVE-2011-2203)
* vmscan: fix shrinker callback bug in fs/super.c
* block: Always check length of all iov entries in blk_rq_map_user_iov()
* [x86] Add amilo-rfkill driver for some Fujitsu-Siemens Amilo laptops
(Closes: #631664)
[ Arnaud Patard ]
* [arm] add missing ioread/write be functions to ixp4xx to fix FTBFS
* [armhf] allow to build kernel image for iMX51 and iMX53 and enable some
iMX53 platforms.
* [armhf] add ahci for iMX53, pata for iMX51
-- Ben Hutchings <email address hidden> Sun, 13 Nov 2011 20:08:09 +0000
| Deleted in experimental-release (Reason: None provided.) |
linux-2.6 (3.1.0-1~experimental.1) experimental; urgency=low
* New upstream release: http://kernelnewbies.org/Linux_3.1
- drm/i915: FBC off for ironlake and older, otherwise on by default
(Closes: #641622)
- drm/radeon: Update AVIVO cursor coordinate origin before x/yorigin
calculation (Closes: #585130)
- crypto: ghash - Avoid null pointer dereference if no key is set
[ Ben Hutchings ]
* [powerpc/powerpc64] Add missing #include to LPAR console selection fix
* Make kernel-wedge package checks non-fatal in experimental builds
* [x86/!486] Enable INTEL_IDLE
* aufs: Update to aufs3.1-20111031 (Closes: #644687)
[ Bastian Blank ]
* Use xz compression for debug packages.
* Make gcc-4.6 the default compiler.
* Use shorter versions in the package names.
* Remove linux-tools-* binary package.
* Drop external module packages stuff.
* Set default security module to Unix Discretionary Access Controls.
- Remove unneeded selinux boot parameter.
-- Bastian Blank <email address hidden> Thu, 03 Nov 2011 20:03:14 +0100
linux-2.6 (3.0.0-6) unstable; urgency=high
[ Uwe Kleine-König ]
* [amd64] Update rt featureset to 3.0.7-rt20
[ Bastian Blank ]
* Add stable 3.0.7, including:
- drm/radeon: Update AVIVO cursor coordinate origin before x/yorigin
calculation (Closes: #585130)
- ipv6: fix NULL dereference in udp6_ufo_fragment() (Closes: #643817)
For the complete list of changes, see:
http://www.kernel.org/pub/linux/kernel/v3.0/ChangeLog-3.0.7
[ Ben Hutchings ]
* [powerpc] Change ATA, PATA_MACIO from module to built-in (Closes: #641210)
* [powerpc] Change IDE, IDE_GD from built-in to module
* Add stable 3.0.8, including:
- cputimer: Cure lock inversion
- drm/ttm: ensure ttm for new node is bound before calling move_notify()
- drm/ttm: unbind ttm before destroying node in accel move cleanup
- CIFS: Fix ERR_PTR dereference in cifs_get_root
- xfs: start periodic workers later
- mm: fix race between mremap and removing migration entry
- x25: Prevent skb overreads when checking call user data
- crypto: ghash - Avoid null pointer dereference if no key is set
(CVE-2011-4081)
- hfsplus: Fix kfree of wrong pointers in hfsplus_fill_super() error path
For the complete list of changes, see:
http://www.kernel.org/pub/linux/kernel/v3.0/ChangeLog-3.0.8
* [{mips,mipsel}/{4,5}kc-malta] Disable X.25, as in all other configurations
* ark3116: Fix initialisation order (Closes: #640391)
* Add empty files to trigger generation of kernel-image udebs
* aufs: Update to aufs3.0-20111031 (Closes: #644687)
* xfs: Fix possible memory corruption in xfs_readlink (CVE-2011-4077)
* oom: fix integer overflow of points in oom_badness (CVE-2011-4097)
-- Ben Hutchings <email address hidden> Tue, 01 Nov 2011 14:50:06 +0000
linux-2.6 (2.6.32-38) stable; urgency=high
* Revert "ipv6: make fragment identifications less predictable"
(Closes: #643817). This reopens CVE-2011-2699.
-- Ben Hutchings <email address hidden> Sun, 02 Oct 2011 00:17:26 +0100
linux-2.6 (3.0.0-5) unstable; urgency=low
[ Ben Hutchings ]
* Bump ABI to 2
* kobj_uevent: Ignore if some listeners cannot handle message
(Closes: #641661)
* Build udebs for the installer
* Add stable 3.0.5 and 3.0.6, including:
- TTY: pty, fix pty counting
- pata_via: disable ATAPI DMA on AVERATEC 3200
- atm: br2684: Fix oops due to skb->dev being NULL
- alarmtimers: Avoid possible null pointer traversal
- alarmtimers: Memset itimerspec passed into alarm_timer_get
- alarmtimers: Avoid possible denial of service with high freq periodic
timers
- rtc: Fix RTC PIE frequency limit
- x86, perf: Check that current->mm is alive before getting user callchain
- xen/smp: Warn user why they keel over - nosmp or noapic and what to use
instead. (Closes: #637308)
- drm/nouveau: properly handle allocation failure in nouveau_sgdma_populate
- net/9p: fix client code to fail more gracefully on protocol error
- virtio: Fix the size of receive buffer packing onto VirtIO ring.
- virtio: VirtIO can transfer VIRTQUEUE_NUM of pages.
- fs/9p: Fid is not valid after a failed clunk.
- fs/9p: When doing inode lookup compare qid details and inode mode bits.
- fs/9p: Always ask new inode in create
- net/9p: Fix the msize calculation.
- 9p: close ACL leaks
- fs/9p: Add fid before dentry instantiation
- net/9p: Fix kernel crash with msize 512K
- fs/9p: Always ask new inode in lookup for cache mode disabled
- vfs: restore pinning the victim dentry in vfs_rmdir()/vfs_rename_dir()
- cifs: fix possible memory corruption in CIFSFindNext (CVE-2011-3191)
- writeback: introduce .tagged_writepages for the WB_SYNC_NONE sync stage
- writeback: update dirtied_when for synced inode to prevent livelock
- fib:fix BUG_ON in fib_nl_newrule when add new fib rule
- scm: Capture the full credentials of the scm sender
- vlan: reset headers on accel emulation path
- xfrm: Perform a replay check after return from async codepaths
- bridge: Pseudo-header required for the checksum of ICMPv6
- bridge: fix a possible use after free
- TPM: Call tpm_transmit with correct size (CVE-2011-1161)
- TPM: Zero buffer after copying to userspace (CVE-2011-1162)
- ALSA: fm801: Gracefully handle failure of tuner auto-detect
(Closes: #641946)
- btrfs: fix d_off in the first dirent
- ARM: 7091/1: errata: D-cache line maintenance operation by MVA may not
succeed
- ARM: 7099/1: futex: preserve oldval in SMP __futex_atomic_op
- ALSA: usb-audio: Check for possible chip NULL pointer before clearing
probing flag
- cfg80211: Fix validation of AKM suites
- iwlagn: fix dangling scan request
- block: Free queue resources at blk_release_queue() (Closes: #631187)
For the complete list of changes, see:
http://www.kernel.org/pub/linux/kernel/v3.0/ChangeLog-3.0.5
http://www.kernel.org/pub/linux/kernel/v3.0/ChangeLog-3.0.6
* Make taskstats require root access (CVE-2011-2494)
[ Uwe Kleine-König ]
* [amd64] Update rt featureset to 3.0.6-rt16 (Closes: #643301)
-- Ben Hutchings <email address hidden> Wed, 05 Oct 2011 15:14:34 +0100
linux-2.6 (2.6.26-27) oldstable; urgency=high
[ Ben Hutchings ]
* dm,md: Deal with merge_bvec_fn in component devices better
(Closes: #604457)
* rt2x00: Fix memory leak after failing to insert RTS/CTS frame
(Closes: #561890)
[ dann frazier ]
* Include selected backport from 2.6.27.58:
- md: fix bug with re-adding of partially recovered device.
* Include selected backports from 2.6.27.59:
- NFS: fix the return value of nfs_file_fsync()
- ptrace: use safer wake up on ptrace_detach()
- [x86] mm: avoid possible bogus tlb entries by clearing prev mm_cpumask
after switching mm
- dm raid1: fail writes if errors are not handled and log fails
- [x86] asus_acpi: world-writable procfs files
- [x86] acer-wmi: world-writable sysfs threeg file
- [x86] tc1100-wmi: world-writable sysfs wireless and jogdial files
- NFSD: memory corruption due to writing beyond the stat array
- ext2: Fix link count corruption under heavy link+rename load
- virtio: set pci bus master enable bit
- [s390] keyboard: integer underflow bug
- ocfs2_connection_find() returns pointer to bad structure
- libsas: fix runaway error handler problem
- NFS: Fix "kernel BUG at fs/aio.c:554!"
- md: fix regression with re-adding devices to arrays with no metadata
- [x86] Flush TLB if PGD entry is changed in i386 PAE mode
- ext3: skip orphan cleanup on rocompat fs
- cciss: fix lost command issue
* cifs: fix an oops that can occur when accessing filenames containing
accented characters from a Windows ME server (Closes: #524438)
* [hppa] Fix FTBFS caused by CVE-2011-2496 fix
-- dann frazier <email address hidden> Mon, 19 Sep 2011 22:30:56 -0600
| Deleted in experimental-release (Reason: None provided.) |
linux-2.6 (3.1.0~rc7-1~experimental.1) experimental; urgency=low * New upstream release candidate [ Ben Hutchings ] * Build udebs for the installer -- Ben Hutchings <email address hidden> Sun, 25 Sep 2011 22:52:50 +0100
| Superseded in experimental-release |
linux-2.6 (3.1.0~rc6-1~experimental.1) experimental; urgency=low * New upstream release candidate [ Ben Hutchings ] * [ia64] Disable GENERIC_GPIO (fixes FTBFS) * [i386] libertas: prioritize usb8388_olpc.bin firmware on OLPC machines * [armel/ixp4xx] Add gpioblib support (fixes FTBFS) * [i386] Fix alignment of alternative instruction entries (Closes: #640964) -- Ben Hutchings <email address hidden> Wed, 21 Sep 2011 05:45:40 +0100
linux-2.6 (3.0.0-4) unstable; urgency=low
[ Ben Hutchings ]
* Make bug script accept failure of lspci (Closes: #639439)
* [alpha] Disable GENERIC_GPIO (Closes: #638696)
* Add stable 3.0.4, including:
- loop: fix deadlock when sysfs and LOOP_CLR_FD race against each other
- Btrfs: fix an oops of log replay
- ext4: Fix ext4_should_writeback_data() for no-journal mode
- ext4: call ext4_ioend_wait and ext4_flush_completed_IO in ext4_evict_inode
- ext4: Resolve the hang of direct i/o read in handling
EXT4_IO_END_UNWRITTEN.
- ext4: fix nomblk_io_submit option so it correctly converts uninit blocks
- xen-blkfront: Drop name and minor adjustments for emulated scsi devices
- xen/x86: replace order-based range checking of M2P table by linear one
- rt2x00: fix order of entry flags modification
- Add a personality to report 2.6.x version numbers
For the complete list of changes, see:
http://www.kernel.org/pub/linux/kernel/v3.0/ChangeLog-3.0.4
* sendmmsg/sendmsg: fix unsafe user pointer access
* rt2x00: fix crash in rt2800usb_write_tx_desc
* rt2x00: fix crash in rt2800usb_get_txwi (Closes: #636531)
* [sparc] Only Panther cheetah+ chips have POPC (Closes: #639949)
* uvcvideo: Fix crash when linking entities (Closes: #637740)
* Update Spanish debconf template translations (Omar Campagne)
(Closes: #636242)
[ Moritz Muehlenhoff ]
* Update German Debconf translation. Thanks to Holger Wansing
(Closes: #641487)
[ Uwe Kleine-König ]
* [amd64] Update rt featureset to 3.0.4-rt14
-- Ben Hutchings <email address hidden> Mon, 19 Sep 2011 14:40:42 +0100
| Superseded in experimental-release |
linux-2.6 (3.1.0~rc4-1~experimental.1) experimental; urgency=low
* New upstream release candidate
[ Ben Hutchings ]
* aufs: Disable until it is updated for Linux 3.1
* rt: Disable until it is updated for Linux 3.1
* nfs: Enable NFSv4.1/pNFS (Closes: #627655)
* [x86] ACPI: Enable ACPI_APEI_GHES as built-in (no longer modular).
Enable ACPI_APEI_MEMORY_FAILURE.
* netfilter: Enable IP_SET_HASH_NETIFACE as module
* net: Enable NFC, NFC_PN533 as modules
* video: Enable FB_UDL as module (Closes: #618261)
* target: Enable ISCSI_TARGET as module
* skge: Enable SKGE_GENESIS
* net/wireless: Enable RTL8192DE as module
* hwmon: Enable SENSORS_EMC2103, SENSORS_LM95245, SENSORS_MAX1668,
SENSORS_NTC_THERMISTOR, SENSORS_SMM665 as modules
* [i386] Enable GPIO_CS5535, MFD_CS5535, CS5535_MFGPT,
CS5535_CLOCK_EVENT_SRC, GPIO_VX855, MFD_VX855 as modules;
[i386/486] Enable OLPC_XO1_PM, OLPC_XO1_RTC, OLPC_XO1_SCI, OLPC_XO15_SCI
(Closes: #639113)
* media/dvb: Enable DVB_NET
* media/rc: Enable IR_MCE_KBD_DECODER as module
* gspca: Enable USB_GSPCA_SE401 as module
* de4x5: Disable on all architectures except alpha (Closes: #639538)
* wl128x: Disable on all flavours except armhf/omap
* Make bug script accept failure of lspci (Closes: #639439)
* [alpha] Disable GENERIC_GPIO (Closes: #638696)
-- Ben Hutchings <email address hidden> Mon, 29 Aug 2011 14:48:28 +0100
linux-2.6 (3.0.0-3) unstable; urgency=low
[ Ben Hutchings ]
* Disable SENSORS_SHT15, unlikely to be usable on any supported platform
(Closes: #638696)
* Add stable 3.0.3, including:
- atm: br2864: sent packets truncated in VC routed mode (Closes: #638656)
For the complete list of changes, see:
http://www.kernel.org/pub/linux/kernel/v3.0/ChangeLog-3.0.3
* netfilter: TCP and raw fix for ip_route_me_harder (fixes case where
SNAT/masquerading is not done)
* Remove net device features from bug reports (Closes: #638956)
* [mips,mipsel] Ignore nfs ABI changes made in 3.0.0-2; fixes FTBFS
* genirq: Fix wrong bit operation
* befs: Validate length of long symbolic links (CVE-2011-2928)
* CIFS: Fix memory corruption on mount (Closes: #635344)
* x86-32, vdso: On system call restart after SYSENTER, use int $0x80
* drm/ttm: fix ttm_bo_add_ttm(user) failure path
* fuse: check size of FUSE_NOTIFY_INVAL_ENTRY message
-- Ben Hutchings <email address hidden> Sat, 27 Aug 2011 08:04:02 +0100
linux-2.6 (3.0.0-2) unstable; urgency=high
[ Aurelien Jarno ]
* Add configuration files for s390x architecture.
[ Ben Hutchings ]
* linux-libc-dev: Install include/asm under arch-specific directory
(thanks to Aurelien for correcting the directory); mark package as
multi-arch-coinstallable (Multi-Arch: same)
* [powerpc] Use libata-based drivers for most PATA controllers
(Closes: #636854):
- Various drivers replaced as for x86 in 2.6.32-10
- pata_macio replaces ide_pmac
* Add stable 3.0.2, including:
- net: Cap number of elements for sendmmsg
- net: Fix security_socket_sendmsg() bypass problem
- [x86] xen: allow enable use of VGA console on dom0
- net: Compute protocol sequence numbers and fragment IDs using MD5
- cifs: cope with negative dentries in cifs_get_root
- ALSA: snd-usb: avoid dividing by zero on invalid input
- ipv6: make fragment identifications less predictable (CVE-2011-2699)
- sch_sfq: fix sfq_enqueue() (Closes: #631945)
- gre: fix improper error handling
- ecryptfs: Add mount option to check uid of device being mounted
= expect uid
- ecryptfs: Return error when lower file pointer is NULL
- ext{3,4}: Properly count journal credits for long symlinks
For the complete list of changes, see:
http://www.kernel.org/pub/linux/kernel/v3.0/ChangeLog-3.0.2
* [x86] Enable RTS_PSTOR as module
[ maximilian attems ]
* Add stable 3.0.1, including:
- gro: Only reset frag0 when skb can be pulled (CVE-2011-2723)
- staging: comedi: fix infoleak to userspace (CVE-2011-2909)
- rtc: limit frequency
- CIFS: Fix oops while mounting with prefixpath
- [SCSI] fix crash in scsi_dispatch_cmd()
- tracing: Fix bug when reading system filters on module removal
- tracing: Have "enable" file use refcounts like the "filter" file
- ext4: fix i_blocks/quota accounting when extent insertion fails
- ext4: free allocated and pre-allocated blocks when check_eofblocks_fl
fails
- ext3: Fix oops in ext3_try_to_allocate_with_rsv()
- nfsd4: remember to put RW access on stateid destruction
- nfsd4: fix file leak on open_downgrade
- NFS: Fix spurious readdir cookie loop messages
- proc: fix a race in do_io_accounting()
- ipc/sem.c: fix race with concurrent semtimedop() timeouts and IPC_RMID
- [armel,armhf,hppa] dm io: flush cpu cache with vmapped io
- dm snapshot: flush disk cache when merging
For the complete list of changes, see:
http://www.kernel.org/pub/linux/kernel/v3.0/ChangeLog-3.0.1
[ Jonathan Nieder ]
* perf: do not look at ./config for configuration (Closes: #632923)
(CVE-2011-2905)
[ Uwe Kleine-König ]
* [amd64] Update rt featureset to 3.0.1-rt11
-- Ben Hutchings <email address hidden> Tue, 16 Aug 2011 06:08:53 +0100
linux-2.6 (3.0.0-1) unstable; urgency=low * New upstream release: http://kernelnewbies.org/Linux_3.0 [ maximilian attems ] * Topconfig enable modular VIDEO_SR030PC30, VIDEO_NOON010PC30, SOC_CAMERA_IMX074, SOC_CAMERA_OV2640, SOC_CAMERA_OV6650, SOC_CAMERA_OV9740, USB_YUREX. * [x86] enable modular VIDEO_VIA_CAMERA. * [x86_32] enable modular XO15_EBOOK. * ALSA: hda - Enable auto-parser as default for Conexant codecs. [ Ben Hutchings ] * linux-support, linux-tools: Use dh_python2 instead of dh_pysupport * aufs: Update for 3.0 * [amd64] Enable PCMCIA_AHA152X as module (Closes: #632929) * Update debconf template translations: - Slovak (Slavko) * [x86] comedi: Enable the same drivers as in stable (squeeze), except for ISA drivers on amd64 (Closes: #633516) * Reduce required initramfs-tools version to 0.99~, to ease backporting * [armhf/mx5] Explicitly configure this flavour to support i.MX51; it is not currently possible to support other i.MX5x processors as well [ Arnaud Patard ] * Merge ixp4xx build fix and enable ixp4xx back [ Aurelien Jarno ] * [mips/octeon] Disable MEGARAID_SAS, SUSPEND, HIBERNATION, PM_RUNTIME. Enable FUSION, FUSION_SAS, HW_RANDOM, HW_RANDOM_OCTEON, OCTEON_MGMT_ETHERNET, CONFIG_OCTEON_ETHERNET. [ Bastian Blank ] * [xen] Allow autoloading of backend drivers. [ Uwe Kleine-König ] * [amd64] Add rt featureset with 3.0-rt2 patch set -- Ben Hutchings <email address hidden> Sun, 24 Jul 2011 02:42:27 +0200
| Superseded in experimental-release |
linux-2.6 (3.0.0~rc6-1~experimental.1) experimental; urgency=low * New upstream release candidate [ maximilian attems ] * Topconfig enable modular USB_NET_KALMIA, I2C_DIOLAN_U2C, SMBUS, SENSORS_SMBUS, SENSORS_SHT21, SENSORS_EMC6W201, SENSORS_SCH5627, SENSORS_ADS1015, SENSORS_W83795, SENSORS_DS620, SENSORS_LINEAGE, SENSORS_LTC4151, SENSORS_LTC4261, SENSORS_MAX16065, SENSORS_MAX6639, SENSORS_MAX6642, BT_WILINK. * [x86_32] enable modular I2C_PXA. * [x86] enable modular SENSORS_FAM15H_POWER. * drm/i915: Hold struct_mutex during i915_save_state/i915_restore_state. * [thinkpad]: Add KEY_MICMUTE and enable it on Lenovo X220. * [m68k]: resources: Add lookup_resource(). * m68k/atari: Reserve some ST-RAM early on for device buffer use. * ALSA: hda - Handle -1 as invalid position, too * ALSA: hda - Judge playback stream from stream id in azx_via_get_position() [ Ben Hutchings ] * [x86] Enable SCSI_ISCI as module -- maximilian attems <email address hidden> Tue, 05 Jul 2011 11:05:43 +0200
linux-2.6 (2.6.39-3) unstable; urgency=low [ Ben Hutchings ] * [x86] i915: Revert "drm/i915: Enable GMBUS for post-gen2 chipsets" (Closes: #627575) * linux-source-<version>: Suggest libqt4-dev (for 'make xconfig') instead of libqt3-mt-dev (Closes: #631666) * [armhf] Add omap flavour, thanks to Sebastian Reichel * [armhf] rtc-twl: Switch to using threaded irq * bridge/netfilter: provide a cow_metrics method for fake_ops (Closes: #629932) * Update debconf template translations: - Danish (Joe Dalton) (Closes: #632551) - Slovak (Slavko) (Closes: #608684) * partitions/efi: Fix crash (oops) caused by corrupted GUID partition table (CVE-2011-1577) * ksm: fix NULL pointer dereference in scan_get_next_rmap_item() (CVE-2011-2183) * inet_diag: Fix infinite loop in inet_diag_bc_audit() (CVE-2011-2213) * taskstats: don't allow duplicate entries in listener mode (CVE-2011-2484) * bluetooth: Prevent buffer overflow in l2cap config request (CVE-2011-2497) [ maximilian attems ] * Add stable 2.6.39.2, including: - block: Fix crash (oops) in blkdev_get() on failed exclusive open (Closes: #631574) - nl80211: fix check for valid SSID size in scan operations (CVE-2011-2517) - drm/radeon/kms: viewport height has to be even - drm/radeon/kms: fix for radeon on systems >4GB without hardware iommu - fat: Fix corrupt inode flags when remove ATTR_SYS flag - scsi: Fix oops caused by queue refcounting failure - cifs: don't allow cifs_reconnect to exit with NULL socket pointer - drm/radeon/kms: do bounds checking for 3D_LOAD_VBPNTR and bump array limit - TOMOYO: Fix oops in tomoyo_mount_acl() (CVE-2011-2518) For the complete list of changes, see: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39.2 -- Ben Hutchings <email address hidden> Mon, 04 Jul 2011 07:08:10 +0100
| Superseded in experimental-release |
linux-2.6 (3.0.0~rc5-1~experimental.1) experimental; urgency=low * New upstream release candidate - fix wrong iput on d_inod. (closes: #631255, #631802) [ maximilian attems ] * [x86] enable some comedi modules. (closes: #631199) * [kirkwood] Enable sound support for the HP t5325 (closes: #631762) [ Arnaud Patard ] * [armel] disable ixp4xx, until upstream agrees on how to fix the build error * [armel] Remove configuration options which don't exist anymore * [armhf] disable net dma/async tx on mx5 as it can't work -- maximilian attems <email address hidden> Tue, 28 Jun 2011 11:55:21 +0200
linux-2.6 (2.6.32-35) stable; urgency=high [ Ben Hutchings ] * scsi: Add hpsa driver for HP Smart Array controllers - Disable binding to devices currently handled by cciss * scsi: Add pm8001 driver for PMC-Sierra SAS/SATA HBAs * bnx2i: Add support for BCM5771E * wl1251: Add support for PG11 chips * bnx2x: Add support for BCM84823 * ar9170usb: Add several additional USB device IDs * net: Add bna driver for Brocade Ethernet adapters * Add longterm release 2.6.32.40, including: - ubifs: Fix master node recovery - dasd: Correct device table (Closes: #607416) - udp: Fix bogus UFO packet generation (Closes: #626284) - pmcraid: Reject negative request size - af_unix: Only allow recv on connected seqpacket sockets. - usb: musb: core: set has_tt flag - NFS: nfs_wcc_update_inode() should set nfsi->attr_gencount (Closes: #617364) For the complete list of changes, see: http://www.kernel.org/pub/linux/kernel/v2.6/longterm/v2.6.32/ChangeLog-2.6.32.40 * USB: Prevent buggy hubs from crashing the USB stack (deferred from 2.6.32.29 due to regressions which were fixed in 2.6.32.40) * [x86] cpu: Set ARAT feature on some AMD processors (deferred from 2.6.32.39 due to apparent regression which was fixed in 2.6.32.40) * [armel] Implement accept4() system call (Closes: #625752) * Add longterm release 2.6.32.41, including: - cifs: check for bytes_remaining going to zero in CIFS_SessSetup For the complete list of changes, see: http://www.kernel.org/pub/linux/kernel/v2.6/longterm/v2.6.32/ChangeLog-2.6.32.41 * [x86] Do not enable ARAT feature on AMD processors below family 0x12 [ Ian Campbell ] * Remove lazy vunmap for non-Xen flavours too. (Closes: #613634) [ dann frazier ] * efi: corrupted GUID partition tables can cause kernel oops (CVE-2011-1577) * tunnels: fix netns vs proto registration ordering (CVE-2011-1768) * fs/partitions/ldm.c: fix oops caused by corrupted partition table (CVE-2011-1017) -- dann frazier <email address hidden> Sat, 11 Jun 2011 10:50:32 -0600
| Superseded in experimental-release |
linux-2.6 (3.0.0~rc4-1~experimental.1) experimental; urgency=low * New upstream release candidate - drm/i915: Fixes. (closes: #627976) [ maximilian attems ] * [x86] enable modular INTEL_OAKTRAIL, ACPI_APEI_PCIEAER. * Topconfig enable modular RADIO_WL1273, RADIO_WL128X. [ Ben Hutchings ] * rt2800pci: Add device ID for RT539F device (Closes: #630960) * atm: Enable for all architectures except m68k, s390 (Closes: #630900) -- maximilian attems <email address hidden> Tue, 21 Jun 2011 15:00:23 +0200
| Superseded in experimental-release |
linux-2.6 (3.0.0~rc3-1~experimental.1) experimental; urgency=low * New upstream release candidate [ Ben Hutchings ] * [i386] idle: EXPORT_SYMBOL(default_idle, pm_idle) if CONFIG_APM_MODULE (only); fixes FTBFS [ maximilian attems ] * Update configs. * Topconfig enable BPF_JIT. (closes: #630553) * Update debconf pt (Américo Monteiro) translations. (closes: #627631) * Add kbuild fixes out of linux-next. -- maximilian attems <email address hidden> Thu, 16 Jun 2011 15:04:33 +0200
| Superseded in experimental-release |
linux-2.6 (3.0.0~rc2-1~experimental.1) experimental; urgency=low * New upstream release candidate [ maximilian attems ] * Newer Standards-Version 3.9.2 without changes. [ Hector Oron ] * [armel/iop32x] Fix FTBFS (Closes: #629342) [ Aurelien Jarno ] * [mips,mipsel] Update arch/mips/kernel/i8259.c to fix FTBFS. * [mips,mipsel] Remove explicit disable of CONFIG_DRM_NOUVEAU and CONFIG_DRM_RADEON_KMS. [ Ben Hutchings ] * perf: Cancel -Werror compiler option; fixes FTBFS with perl 5.14 * qla4xxx: Remove our fix for #598503; it has now been fixed upstream in a different way and the two changes resulted in FTBFS * [ia64] nouveau: Disable ACPI support. It probably wasn't very useful on ia64, and now depends on mxm-wmi which is definitely x86-only. * Make gcc-4.5 the default compiler (except for alpha, hppa and m68k) * Restore xen-linux-system-<version>-<flavour> packages -- Ben Hutchings <email address hidden> Thu, 09 Jun 2011 01:10:53 +0100
linux-2.6 (2.6.39-2) unstable; urgency=low [ Ben Hutchings ] * [x86] Enable BACKLIGHT_APPLE, replacing BACKLIGHT_MBP_NVIDIA (Closes: #627492) * cgroups: Disable memory resource controller by default. Allow it to be enabled using kernel parameter 'cgroup_enable=memory'. * rt2800usb: Enable support for more USB devices including Linksys WUSB600N (Closes: #596626) (this change was accidentally omitted from 2.6.39-1) * [x86] Remove Celeron from list of processors supporting PAE. Most 'Celeron M' models do not. * Update debconf template translations: - Swedish (Martin Bagge) (Closes: #628932) - French (David Prévot) (Closes: #628191) * aufs: Update for 2.6.39 (Closes: #627837) * Add stable 2.6.39.1, including: - ext4: dont set PageUptodate in ext4_end_bio() - pata_cmd64x: fix boot crash on parisc (Closes: #622997, #622745) - ext3: Fix fs corruption when make_indexed_dir() fails - netfilter: nf_ct_sip: validate Content-Length in TCP SIP messages - sctp: fix race between sctp_bind_addr_free() and sctp_bind_addr_conflict() - sctp: fix memory leak of the ASCONF queue when free asoc - md/bitmap: fix saving of events_cleared and other state - cdc_acm: Fix oops when Droids MuIn LCD is connected - cx88: Fix conversion from BKL to fine-grained locks (Closes: #619827) - keys: Set cred->user_ns in key_replace_session_keyring (CVE-2011-2184) - tmpfs: fix race between truncate and writepage - nfs41: Correct offset for LAYOUTCOMMIT - xen/mmu: fix a race window causing leave_mm BUG() - ext4: fix possible use-after-free in ext4_remove_li_request() For the complete list of changes, see: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39.1 * Bump ABI to 2 * netfilter: Enable IP_SET, IP_SET_BITMAP_IP, IP_SET_BITMAP_IPMAC, IP_SET_BITMAP_PORT, IP_SET_HASH_IP, IP_SET_HASH_IPPORT, IP_SET_HASH_IPPORTIP, IP_SET_HASH_IPPORTNET, IP_SET_HASH_NET, IP_SET_HASH_NETPORT, IP_SET_LIST_SET, NETFILTER_XT_SET as modules (Closes: #629401) [ Aurelien Jarno ] * [mipsel/loongson-2f] Disable_SCSI_LPFC to workaround GCC ICE. -- Ben Hutchings <email address hidden> Tue, 07 Jun 2011 12:14:05 +0100
| Superseded in experimental-release |
linux-2.6 (3.0.0~rc1-1~experimental.1) experimental; urgency=low * New upstream release candidate [ Ben Hutchings ] * [x86] Enable BACKLIGHT_APPLE, replacing BACKLIGHT_MBP_NVIDIA (Closes: #627492) * cgroups: Disable memory resource controller by default. Allow it to be enabled using kernel parameter 'cgroup_enable=memory'. * rt2800usb: Enable support for more USB devices including Linksys WUSB600N (Closes: #596626) (this change was accidentally omitted from 2.6.39-1) * fs: Enable FHANDLE * cgroups: Enable CGROUP_MEM_RES_CTLR_SWAP but not CGROUP_MEM_RES_CTLR_SWAP_ENABLED. Swap accounting can be enabled using kernel parameter 'swapaccount'. * ipv4: Enable IP_FIB_TRIE_STATS * netfilter: Enable IP_SET, IP_SET_BITMAP_IP, IP_SET_BITMAP_IPMAC, IP_SET_BITMAP_PORT, IP_SET_HASH_IP, IP_SET_HASH_IPPORT, IP_SET_HASH_IPPORTIP, IP_SET_HASH_IPPORTNET, IP_SET_HASH_NET, IP_SET_HASH_NETPORT, IP_SET_LIST_SET, NETFILTER_XT_SET as modules * net/sched: Enable NET_SCH_QFQ as module * can: Enable CAN_SOFTING, CAN_SOFTING_CS as modules * mtd: Enable MTD_SWAP as module * of, proc: Enable PROC_DEVICETREE * dm: Enable DM_RAID, DM_FLAKEY as modules. Note these are currently experimental. * target: Enable TCM_FC as module * net/wireless/ath: Enable CARL9170 as module (carl9170, replacing ar9170usb) * rtlwifi: Enable RTL8192SE as module (Closes: #590280) * net/wireless: Enable MWIFIEX, MWIFIEX_SDIO as modules * net/usb: Enable USB_VL600 as module * tablet: Enable drivers for all possible architectures and flavours * tablet: Enable TABLET_USB_HANWANG as module * pps: Enable PPS_CLIENT_PARPORT as module * ptp: Enable PTP_1588_CLOCK, PTP_1588_CLOCK_GIANFAR, PTP_1588_CLOCK_IXP46X as modules * [x86] watchdog: Enable SP5100_TCO, NV_TCO as modules * media/rc: Enable IR_REDRAT3, RC_LOOPBACK as module * [x86] media/rc: Enable IR_ITE_CIR, IR_FINTEK as modules * gspca: Enable USB_GSPCA_KINECT as module * [i386] radio: Enable RADIO_MIROPCM20 as module * s3fb: Enable FB_S3_DDC * viafb: Enable FB_VIA_X_COMPATIBILITY * es1968: Enable SND_ES1968_RADIO * sound: Enable SND_ISIGHT, SND_LOLA as modules * hid: Enable HID_ACRUX, HID_EMS_FF, HID_KEYTOUCH, HID_LCPOWER, HID_MULTITOUCH, HID_ROCCAT_ARVO, HID_ROCCAT_KONEPLUS, HID_ROCCAT_KOVAPLUS as modules * usb-storage: Enable USB_STORAGE_REALTEK, USB_STORAGE_ENE_UB6250 as modules * mmc: Enable MMC_VUB300, MMC_USHC as modules * memstick: Enable MEMSTICK_R592 as module * [x86] edac: Enable EDAC_I7300 as module * [i386] staging, video: Enable FB_OLPC_DCON as module * [x86] staging, drm: Enable DRM_PSB as module * crypto, net: Enable CRYPTO_USER_API_HASH, CRYPTO_USER_API_SKCIPHER as modules * [x86] block, xen: Enable XEN_BLKDEV_BACKEND as module -- Ben Hutchings <email address hidden> Wed, 01 Jun 2011 06:41:14 +0100
linux-2.6 (2.6.39-1) unstable; urgency=low [ maximilian attems ] * [x86] Enable CRYPTO_AES_NI_INTEL for all flavours. (closes: #623631) * topconfig: Enable SND_USB_6FIRE, SND_FIREWIRE_SPEAKERS, MEDIA_CONTROLLER, DVB_USB_TECHNISAT_USB2, USB_GSPCA_NW80X, USB_GSPCA_VICAM, XEN_WDT, LOOPBACK_TARGET. * [x86] Enable modular XEN_NETDEV_BACKEND. * topconfig enable mem cgroup RESOURCE_COUNTERS, CGROUP_MEM_RES_CTLR. (closes: #534964) * Cleanup configs. [ Ben Hutchings ] * [!x86] Disable TPM drivers. TPMs are currently only fitted in PCs. * rt2800usb: Enable support for more USB devices including Linksys WUSB600N (Closes: #596626) * mm: Select SLAB allocator again. Although SLUB is currently the upstream default, this was set as an experiment rather than a recommendation! SLUB generally has poorer performance than SLAB on larger systems. * postinst: Remove specific support for running a ramdisk creator; warn users that specify one in /etc/kernel-img.conf * Require initramfs-tools >= 0.99, which installs a postinst hook [ Arnaud Patard ] * [armel] Disable eeti touchscreen driver due to missing irq_to_gpio on several platforms. -- maximilian attems <email address hidden> Thu, 19 May 2011 15:34:37 +0200
| Superseded in experimental-release |
linux-2.6 (2.6.39~rc7-1~experimental.1) experimental; urgency=low * [x86] Enable modular ASUS_WMI and ASUS_NB_WMI. (closes: #626141) * [x86] Enable modular DELL_WMI_AIO, HP_ACCEL, INTEL_IPS, ACPI_IPMI. * [x86/486] Enable modular XO1_RFKILL, XO15_EBOOK. * topconfig: Enable modular NF_CONNTRACK_TIMESTAMP, NF_CONNTRACK_SNMP, NETFILTER_XT_TARGET_AUDIT, NETFILTER_XT_MATCH_ADDRTYPE, NETFILTER_XT_MATCH_DEVGROUP, NET_SCH_SFB, NET_SCH_MQPRIO, NET_SCH_CHOKE, SATA_ACARD_AHCI, PATA_ARASAN_CF, SCSI_BNX2X_FCOE. * Add nl debconf template translation. (closes: #622967) Thanks willem kuyn <email address hidden>. * topconfig Enable modular RTL8192CU. (closes: #625613) -- maximilian attems <email address hidden> Tue, 10 May 2011 15:11:00 +0200
| Superseded in experimental-release |
linux-2.6 (2.6.39~rc6-1~experimental.1) experimental; urgency=low
* New upstream release candidate [ maximilian attems ] * Enable SQUASHFS_{LZO,XZ}. (closes: #613658) * [x86] Enable EASYCAP. (closes: #624505) [ Ben Hutchings * xhci-hcd: Include <linux/slab.h> in xhci-pci.c (fixes FTBFS on armel) * [x86] Enable BRCMSMAC; the brcmsmac module replaces brcm80211 (Closes: #625510) [ Aurelien Jarno ] * drm/nouveau, drm/radeon: remove fix for non-powerpc/sparc/x86. * [mips,mipsel] Disabled CONFIG_DRM_NOUVEAU and CONFIG_DRM_RADEON_KMS. * [mips/octeon] Disabled CONFIG_HOTPLUG_CPU and CONFIG_PM. -- maximilian attems <email address hidden> Sun, 08 May 2011 12:23:15 +0200
linux-2.6 (2.6.38-5) unstable; urgency=medium [ Thorsten Glaser ] * [m68k] atari: Enable and compile in generic RTC * [m68k] Backport the most urgent fixes from 2.6.39 - Add helper functions to handle kernel faults, traps and exceptions better (used by the other patches below) - Add improved support for running under the ARAnyM emulator (its native features interface) and emulated hardware + block access (similar to virtio-block) + console access (redirection to stdout) + network access (Ethernet) (Closes: #599121) * [m68k] Add patch from queue fixing atarifb console output on machines with a lot of FastRAM by reserving some ST-RAM early * [m68k] Add patch from mm mailing list to fix SLUB breakage [ Aurelien Jarno ] * [mips/octeon] Disable CONFIG_HOTPLUG_CPU. [ Ben Hutchings ] * rt2800pci, rt2800usb: Enable experimental support for more recent chips (Closes: #623808) * [x86] staging: Enable EASYCAP as module (Closes: #624505) * Add stable 2.6.38.5, including: - p54: Initialize extra_len in p54_tx_80211 - nfsd4: Fix filp leak (regression introduced in 2.6.38.3) - radeon: PLL tweaks for R7xx - nouveau: Fix notifier memory corruption bug - radeon: Fix bad shift in atom iio table parser - [x86] i915: Sanitize the output registers after resume - [x86] ideapad: Read brightness setting on brightness key notify - ath9k_hw: Partially revert "fix dma descriptor rx error bit parsing" - [s390] pfault: fix token handling - ACPI/PM: Avoid infinite recurrence while registering power resources - [hppa] slub: Disable use with DISCONTIGMEM && !NUMA - vfs: avoid large kmalloc()s for the fdtable - agp: Fix arbitrary kernel memory writes (CVE-2011-1745) - agp: Fix OOM and buffer overflow (CVE-2011-1746) For the complete list of changes, see: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38.5 * [hppa] Bump ABI to 2a * mpt2sas: Prevent heap overflows and unchecked reads (CVE-2011-1494, CVE-2011-1495) * [armel] Prevent heap corruption in OABI semtimedop * can: Add missing socket check in can/bcm release (CVE-2011-1598) * ldm: Disable broken support for VBLK fragments (CVE-2011-1017) -- Ben Hutchings <email address hidden> Sat, 07 May 2011 21:24:55 +0100
| Superseded in experimental-release |
linux-2.6 (2.6.39~rc5-1~experimental.1) experimental; urgency=low * New upstream release candidate [ Ben Hutchings ] * [powerpc] kexec: Fix build failure on 32-bit SMP * net/wireless: Adjust config for iwlegacy/iwlwifi split (Closes: #624124) - Enable IWLWIFI_LEGACY as module - Enable IWL4965 as module; it is no longer part of the iwlagn module * [armhf] Actually install zImage into the linux-image package, thanks to Sebastian Reichel * [armhf] Build a linux-tools package * Fix configuration for features that are no longer modular, thanks to Sedat Dilek (Closes: #624372): - bluetooth: Re-enable BT_L2CAP and BT_SCO as part of bluetooth module - leds: Explicitly enable LEDS_CLASS as built-in - mfd: Explicitly disable MFD_WM8994 [ Aurelien Jarno ] * drm/nouveau, drm/radeon: fix build failure on mips. -- Ben Hutchings <email address hidden> Fri, 29 Apr 2011 06:04:13 +0100
| Superseded in experimental-release |
linux-2.6 (2.6.39~rc4-1~experimental.1) experimental; urgency=low * New upstream release candidate [ Ben Hutchings ] * [i386] Rename '686-bigmem' flavour to '686-pae'; remove '686' flavour. For 686-class systems without PAE, the '486' flavour is more efficient than the '686' flavour due to optimisation for uniprocessor systems. * Add armhf architecture with mx5 flavour, thanks to Hector Oron and Vagrant Cascadian (Closes: #621032) -- Ben Hutchings <email address hidden> Sun, 24 Apr 2011 03:21:31 +0100
linux-2.6 (2.6.38-4) unstable; urgency=low * usb-audio: Define another USB ID for a buggy USB MIDI cable (Closes: #617743) * net: Enable BATMAN_ADV as module (Closes: #622361) * Add stable 2.6.38.3, including: - eCryptfs: Unlock page in write_begin error path - irda: validate peer name and attribute lengths (CVE-2011-1180) - irda: prevent heap corruption on invalid nickname - nilfs2: fix data loss in mmap page write for hole blocks - ALSA: pcm: fix infinite loop in snd_pcm_update_hw_ptr0() - inotify: fix double free/corruption of stuct user - perf: Fix task_struct reference leak - ROSE: prevent heap corruption with bad facilities (CVE-2011-1493) - [x86] mtrr, pat: Fix one cpu getting out of sync during resume - Input: synaptics - fix crash in synaptics_module_init() - ath9k: fix a chip wakeup related crash in ath9k_start - mac80211: fix a crash in minstrel_ht in HT mode with no supported MCS rates - UBIFS: fix oops on error path in read_pnode - quota: Don't write quota info in dquot_commit() - mm: avoid wrapping vm_pgoff in mremap() - wl12xx: fix potential buffer overflow in testmode nvs push - Bluetooth: sco: fix information leak to userspace (CVE-2011-1078) - bridge: netfilter: fix information leak (CVE-2011-1080) - Bluetooth: bnep: fix buffer overflow (CVE-2011-1079) - netfilter: ip_tables: fix infoleak to userspace (CVE-2011-1171) - netfilter: arp_tables: fix infoleak to userspace (CVE-2011-1170) - [x86] Revert "x86: Cleanup highmap after brk is concluded" (Closes: #621072) - Squashfs: handle corruption of directory structure - ext4: fix a double free in ext4_register_li_request - ext4: fix credits computing for indirect mapped files - nfsd: fix auth_domain reference leak on nlm operations - nfsd4: fix oops on lock failure - char/tpm: Fix unitialized usage of data buffer (CVE-2011-1160) - ipv6: netfilter: ip6_tables: fix infoleak to userspace (CVE-2011-1172) - econet: 4 byte infoleak to the network (CVE-2011-1173) - sound/oss: remove offset from load_patch callbacks (CVE-2011-1476, CVE-2011-1477) - inotify: fix double free/corruption of stuct user (CVE-2011-1479) For the complete list of changes, see: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38.3 * Add stable 2.6.38.4, including: - vm: Fix vm_pgoff wrap in stack expansion - cifs: Always do is_path_accessible check in cifs_mount - cifs: Check for private_data before trying to put it - sn9c102: Restrict world-wirtable sysfs files - UBIFS: Restrict world-writable debugfs files - vm: Fix mlock() on stack guard page - UBIFS: Fix assertion warnings - perf: Fix task context scheduling - fib: Add rtnl locking in ip_fib_net_exit - l2tp: Fix possible oops on l2tp_eth module unload - ipv6: Fix duplicate /proc/sys/net/ipv6/neigh directory entries. - net_sched: fix ip_tos2prio - pppoe: drop PPPOX_ZOMBIEs in pppoe_flush_dev - xfrm: Refcount destination entry on xfrm_lookup - vlan: Take into account needed_headroom - bridge: Reset IPCB when entering IP stack on NF_FORWARD - futex: Set FLAGS_HAS_TIMEOUT during futex_wait restart setup - oom-kill: Remove boost_dying_task_prio() - UBIFS: Fix oops when R/O file-system is fsync'ed - sched: Fix erroneous all_pinned logic - vmscan: all_unreclaimable() use zone->all_unreclaimable as a name - next_pidmap: fix overflow condition - proc: Do proper range check on readdir offset - [powerpc] Fix oops if scan_dispatch_log is called too early - ehci: Unlink unused QHs when the controller is stopped - USB: Fix formatting of SuperSpeed endpoints in /proc/bus/usb/devices - xhci: Fix math in xhci_get_endpoint_interval() - xhci: Also free streams when resetting devices - USB: Fix unplug of device with active streams - bluetooth: Fix HCI_RESET command synchronization - bridge: Reset IPCB in br_parse_ip_options - ip: ip_options_compile() resilient to NULL skb route For the complete list of changes, see: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38.4 * [s390] pfault: fix token handling (Closes: #622570) -- Ben Hutchings <email address hidden> Sat, 23 Apr 2011 03:17:53 +0100
linux-2.6 (2.6.38-3) unstable; urgency=low [ Ben Hutchings ] * [ppc64] Add to linux-tools package architectures (Closes: #620124) * [amd64] Save cr4 to mmu_cr4_features at boot time (Closes: #620284) * appletalk: Fix bugs introduced when removing use of BKL * ALSA: Fix yet another race in disconnection * cciss: Fix lost command issue * ath9k: Fix kernel panic in AR2427 * ses: Avoid kernel panic when lun 0 is not mapped * PCI/ACPI: Report ASPM support to BIOS if not disabled from command line [ Aurelien Jarno ] * rtlwifi: fix build when PCI is not enabled. [ Martin Michlmayr ] * rtlwifi: Eliminate udelay calls with too large values (Closes: #620204) -- Ben Hutchings <email address hidden> Wed, 06 Apr 2011 13:53:30 +0100
linux-2.6 (2.6.38-2) unstable; urgency=low [ Ben Hutchings ] * kconfig: Avoid buffer underrun in choice input (fixes FTBFS on mips) * rt2800usb: Disable powersaving by default (Closes: #618930) * b43: Enable B43_PHY_N (Closes: #619070) * net/wireless: Enable RTL8192CE as module (Closes: #619051) * Add configuration for Debian architecture ppc64, matching the powerpc/powerpc64 flavour (Closes: #618976) * Enable BOOT_PRINTK_DELAY (support for the boot_delay kernel parameter) * [x86/!486] Enable TRANSPARENT_HUGEPAGE, TRANSPARENT_HUGEPAGE_MADVISE (Closes: #618924) * [x86/486] Enable X86_32_IRIS (IRIS power-off support) (Closes: #619493) * Add stable 2.6.38.1, including: - RDMA/cma: Fix crash in request handlers (CVE-2011-0695) For the complete list of changes, see: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38.1 * radeon: Add some sanity checks to obj info record parsing, thanks to John Lindgren (Closes: #618847) * [x86] KVM: remove isr_ack logic from PIC (Closes: #612105) * Add stable 2.6.38.2, including: - cgroups: If you list_empty() a head then don't list_del() it - oom: Fix various bugs in victim task selection - xen-kbdfront: Advertise either absolute or relative coordinates - signal: Prevent rt_sigqueueinfo and rt_tgsigqueueinfo from spoofing the signal code (CVE-2011-1182) - ext3: Skip orphan cleanup on rocompat fs - sysctl: Restrict write access to dmesg_restrict - proc: Protect mm start_code/end_code in /proc/pid/stat - nfsd: Fix internal NFSv4.1 operation flags to be non-overlapping - nfsd: Fix wrong limit used in NFSv4 session creation - USB: Do not pass negative length to snoop_urb() - cdc-acm: Fix various bugs that can lead to a crash or memory corruption - fs: Fix deadlock in pivot_root() - fs: Assign sb->s_bdi to default_backing_dev_info if the bdi is going away - x86: Cleanup highmap after brk is concluded - NFS: Fix a hang/infinite loop in nfs_wb_page() - ext4: Skip orphan cleanup if fs has unknown ROCOMPAT features For the complete list of changes, see: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38.2 * [amd64] media/rc: Enable IR_NUVOTON as module (Closes: #619937) * [x86] media/rc: Enable IR_WINBOND_CIR as module * [x86] Enable DEBUG_SET_MODULE_RONX (Closes: #619838) * SCSI: Enable TARGET_CORE and related modules (Closes: #619298) * [hppa] Remove .size directive for flush_alias_page (should fix FTBFS) [ Jurij Smakov ] * Bump CONFIG_NR_CPUS on sparc to 256 to accomodate T2+ machines (Closes: #619435) * Bump ABI to 2 -- Ben Hutchings <email address hidden> Tue, 29 Mar 2011 05:31:03 +0100
linux-2.6 (2.6.32-31) stable; urgency=low [ Ian Campbell ] * xen: blkback: fix potential leak of kernel thread. (CVE-2010-3699) [ Moritz Muehlenhoff ] * rds: Fix rds_iovec page count overflow (CVE-2010-3865) [ Ben Hutchings ] * tty: Fix information leaks from SIOCGICOUNT handlers (CVE-2010-4075, CVE-2010-4076, CVE-2010-4077) * bonding: Ensure that we unshare skbs prior to calling pskb_may_pull (Closes: #610838) * r8169: Keep firmware in memory (Closes: #609538) * linux-base: Convert LILO entries for /boot/vmlinuz, /boot/vmlinuz.old (Closes: #613200) * aufs: Fix VM race leading to kernel panic (Closes: #607879) * rt2500usb: Fall back to SW encryption for TKIP+AES (Closes: #611390) * Add longterm 2.6.32.29: - SCSI: Fix medium error problems with some arrays which can cause data corruption - ptrace: Use safer wake up on ptrace_detach() - [x86] mm: Avoid possible bogus TLB entries by clearing prev mm_cpumask after switching mm - sched: Fix softirq time accounting - sched: Use group weight, idle cpu metrics to fix imbalances during idle - [openvz,vserver] Revert sched changes since they conflict * Revert "USB: Prevent buggy hubs from crashing the USB stack", included in longterm 2.6.32.29 and reported to cause a regression * virtio_net: Further fixes for out-of-memory conditions (Closes: #603835) - Fix OOM handling on TX - Add schedule check to napi_enable call * af_unix: Limit recursion level of passing sockets through sockets (variant of CVE-2010-4249) * iowarrior: Don't trust report_size for buffer size (CVE-2010-4656) * drm: Fix unsigned vs signed comparison issue in modeset ctl ioctl (CVE-2011-1013) * brcm80211: Fix suspend/resume in brcmsmac (Closes: #600769, #604802) * brcm80211: Fix race between scanning and calibration on SMP (Closes: 602444) * drm/i915: Overlay on gen2 can't address above 1G * drm/i915: Fix memory corruption with GM965 and >4GB RAM * ipv6: Silence privacy extensions initialization (Closes: #590653) * [x86] Enable VT6656, loading firmware from a separate file (requires firmware-linux-nonfree 0.28+squeeze1) (Closes: #568454) * usbfs: Show correct speed for SuperSpeed USB devices (Closes: #613531) * drm/i915: Add pipe A force quirk for some laptops (Closes: #608148) * psmouse/elantech: Fix detection and decoding for newer Elantech touchpads (Closes: #613335) [ dann frazier ] * xfs: Fix information leak using stale NFS handle (CVE-2010-2943) * CAN: Use inode instead of kernel address for /proc file (CVE-2010-4565) [ maximilian attems] * Update openvz patch to feoktistov (ipv6, checkpointing, stability, ipsec, nfs, ppp, tc, ve). (closes: #607041, #613501, #613170) * HID: add support for Acan FG-8100 barcode reader. (closes: #615888) * Add longterm 2.6.32.30: - nfsd: Memory corruption due to writing beyond the stat array - av7110: check for negative array offset (CVE-2011-0521) - cred: Fix get_task_cred() and task_state() to not resurrect dead credentials - cred: Fix kernel panic upon security_file_alloc() failure - cred: Fix BUG() upon security_cred_alloc_blank() failure - cred: Fix memory and refcount leaks upon security_prepare_creds() failure - dm/raid1: Fail writes if errors are not handled and log fails - GFS2: Fix bmap allocation corner-case bug - [s390] remove task_show_regs (CVE-2011-0710) - PM/hibernate: Return error code when alloc_image_page() fails - fs/partitions: Validate map_count in Mac partition tables (CVE-2011-1010) - ALSA: caiaq - Fix possible string-buffer overflow (CVE-2011-0712) - acer-wmi, asus_acpi, tc1100-wmi: Restrict write permissions on files in procfs/sysfs - [x86] usbip/vhci: Update reference count for usb_device - [x86] usbip/vhci: Give back URBs from in-flight unlink requests - [x86] usbip/vhci: Refuse to enqueue for dead connections - epoll: Prevent creating circular epoll structures - fs/partitions/ldm: Corrupted partition table can cause kernel oops - xhci: Avoid BUG() in interrupt context - xhci: Fix errors in the running total calculations in the TRB math - xhci: Fix an error in count_sg_trbs_needed() - x25: Do not reference freed memory * Add longterm 2.6.32.31. * Add longterm 2.6.32.32-rc1: - netxen: fix set mac addr. (closes: #616058) - [xen] do not release any memory under 1M in domain 0. (closes: #613823) - virtio: set pci bus master enable bit. (closes: #610360) - sctp: Fix oops when sending queued ASCONF chunks (CVE-2010-1173). - drm/ttm: Fix two race conditions + fix busy codepaths (closes: #591061) * Add Slovak translation by Slavko. (closes: #608684) * Add drm changes from 2.6.32.28+drm33.13: - drm/i915: Add dependency on CONFIG_TMPFS. - drm/i915/lvds: Add AOpen i915GMm-HFS to the list of false-positive LVDS. - drm/radeon/kms: add pll debugging output. - drm/radeon/kms: add quirk for Mac Radeon HD 2600 card. - drm/radeon/kms: fix s/r issues with bios scratch regs. - drm/radeon/kms: make the mac rv630 quirk generic. - drm/radeon: remove 0x4243 pci id. [ Aurelien Jarno ] * init: fix race between init and kthreadd, fixes a kernel panic on mips/5kc-malta. * mips/swarm: enable PATA drivers that have been lost during IDE -> PATA conversion. [ Martin Michlmayr ] * Orion: add support for Buffalo LS-CHL (Closes: #590105). * Kirkwood: initialize PCIE1 for QNAP TS-419P+ (Closes: #613499). [ Jurij Smakov ] * sparc: add sparc-console-handover.patch to address problems with console handover on sparc causing kernel to hang during boot on systems using atyfb driver. Thanks to Fabio M. Di Nitto <email address hidden> for the patch. (Closes: #602853) [ Bastian Blank ] * Add supportt for AMD Family 10h/11h CPU internal temperatur sensor. (closes: #614555) -- Ben Hutchings <email address hidden> Mon, 07 Mar 2011 01:54:53 +0000
linux-2.6 (2.6.38-1) unstable; urgency=low * New upstream release: http://kernelnewbies.org/Linux_2_6_38 [ Ben Hutchings ] * Move firmware-linux-free to separate source package (firmware-free) * Move linux-base to separate source package * net/can: Enable CAN_SLCAN as module (Closes: #617629) * sound: Enable SND_ALOOP as module (Closes: #617869) * Remove the Big Kernel Lock: - adfs,appletalk,i810,ufs,usbip: Refactor locking - hpfs: Disable HPFS_FS * ext4: Disable FS_IOC_FIEMAP ioctl temporarily (together with fixes for btrfs in 2.6.38, closes: #615035) * sched: Build with SCHED_AUTOGROUP, but do not enable autogrouping by default (use sysctl kernel.sched_autogroup_enabled=1) (Closes: #618486) * Set ABI to 1 [ Aurelien Jarno] * mips/malta-[45]kc: - disable ATM, TR, WAN. - synchronize options in malta-4kc and malta-5kc. -- Ben Hutchings <email address hidden> Wed, 16 Mar 2011 04:47:57 +0000
| Superseded in experimental-release |
linux-2.6 (2.6.38~rc8-1~experimental.1) experimental; urgency=low * New upstream release candidate [ Ben Hutchings ] * [sparc] Fix .size directive for do_int_load * [arm] Fix .size directive for xscale_dma_a0_map_area -- Ben Hutchings <email address hidden> Sat, 12 Mar 2011 03:31:52 +0000
| Superseded in experimental-release |
linux-2.6 (2.6.38~rc7-1~experimental.1) experimental; urgency=low [ maximilian attems ] * New upstream release candidate - swiotlb: Fix wrong panic (Closes: #615990) * x86: Set DRM_I915_KMS on request by xorg team. [ Ben Hutchings ] * [x86] Correct typos in label names in two asm functions (Closes: #616426) * [x86] Enable VT6656, loading firmware from a separate file (requires firmware-linux-nonfree 0.29) (Closes: #568454) * perf: Build with libdwarf for improved analysis capabilities * perf: Build with newt for improved user interface (Closes: #615868) * aufs: Update for 2.6.38 * aufs: Fix device numbers passed to security_path_mknod() * dib0700/dib7000m: Add pid filtering (Closes: #614837) * [powerpc] Revert fb module changes (Closes: #614221) -- Ben Hutchings <email address hidden> Tue, 08 Mar 2011 02:34:04 +0000
linux-2.6 (2.6.37-2) unstable; urgency=low [ Ben Hutchings ] * Add stable 2.6.37.1: - libata: Set queue DMA alignment to sector size for ATAPI too - USB: serial: add missing .usb_driver field in serial drivers - USB: EHCI: fix scheduling while atomic during suspend - zram: Fix data corruption issue - brcm80211: Fix suspend/resume issue - ath9k: Fix system hang when resuming from S3/S4 - SCSI: Fix medium error problems with some arrays which can cause data corruption - libsas: Fix runaway error handler problem - NFS: Don't use vm_map_ram() in readdir - NFS: Fix NFSv3 exclusive open semantics - /proc/kcore: Fix seeking - mm: Fix migration hangs on anon_vma lock - writeback: Stop background/kupdate works from livelocking other works - writeback: Avoid livelocking WB_SYNC_ALL writeback - ext4: Fix trimming of a single group - af_unix: Avoid socket->sk NULL OOPS in stream connect security hooks - virtio_net: Add schedule check to napi_enable call - ptrace: Use safer wake up on ptrace_detach() - net: Fix ip link add netns oops - SMP: Fix smp_call_function_many() SMP race - md: Ensure no IO request to get md device before it is properly initialised - PM/runtime: Don't enable interrupts while running in_interrupt - [x86] mm: Avoid possible bogus TLB entries by clearing prev mm_cpumask after switching mm * Kbuild: Include localversion file in linux-headers-*; fixes output of 'make kernelrelease' * Add stable 2.6.37.2: - nfsd: Memory corruption due to writing beyond the stat array - xen: p2m: Correctly initialize partial p2m leaf - av7110: Check for negative array offset (CVE-2011-0521) - cred: Fix kernel panic upon security_file_alloc() failure - btrfs: Prevent heap corruption in btrfs_ioctl_space_info() (CVE-2011-0699) - cred: Fix BUG() upon security_cred_alloc_blank() failure - cred: Fix memory and refcount leaks upon security_prepare_creds() failure - PCI: Use security_capable() when checking capablities during config space read - [s390] Remove task_show_regs (CVE-2011-0710) - PM/hibernate: Return error code when alloc_image_page() fails - fs/partitions: Validate map_count in Mac partition tables - workqueue: Wake up a worker when a rescuer is leaving a gcwq - ALSA: caiaq - Fix possible string-buffer overflow * Set ABI to 2 [ Martin Michlmayr ] * [armel/orion5x] Re-enable all devices. * [armel/kirkwood] Re-enable Seagate FreeAgent DockStar support. -- Ben Hutchings <email address hidden> Sat, 26 Feb 2011 03:16:16 +0000
| Superseded in experimental-release |
linux-2.6 (2.6.38~rc6-1~experimental.1) experimental; urgency=low [ Ben Hutchings ] * New upstream release candidate - drm/radeon/kms: hopefully fix pll issues for real (v3) (Closes: #614566) - r8169: Keep firmware in memory (Closes: #609538) - [sparc] Fix misaligned tracing information which the module loader does not support (Closes: #609371) - [sh4] Export cpu_core_map to fix build failure with CONFIG_SFC=m. - [armel] Support for Buffalo LS-CHL (Closes: #590105). - btrfs: Prevent heap corruption in btrfs_ioctl_space_info() (CVE-2011-0699) - [s390] Remove task_show_regs (CVE-2011-0710) * DFSG: Remove drivers/staging/ft1000/ft1000-pcmcia/boot.h, non-free firmware for a driver we don't build (Closes: #609448) * module,bug: Add TAINT_OOT_MODULE flag for modules that weren't built in-tree [ maximilian attems ] * [x86] linux-images suggest extlinux, s/grub/grub-pc/. (closes: #613909) [ Aurelien Jarno] * mips/swarm: enable PATA drivers that have been lost during IDE -> PATA conversion. * mips/malta-[45]kc: set VIRTUALIZATION. -- maximilian attems <email address hidden> Tue, 22 Feb 2011 14:36:33 +0100
linux-2.6 (2.6.37-1) unstable; urgency=low [ Ben Hutchings ] * [arm] ixp4xx: Revert build fix, now applied upstream which resulted in another build failure * r8169: Keep firmware in memory (Closes: #609538) * r8712u: Firmware filename is rtlwifi/rtl8712u.bin (Closes: #602450) * [sparc] Fix misaligned tracing information which the module loader does not support (Closes: #609371) * Set ABI to 1 * Add aufs2.1, marked as staging (Closes: #573189, #613248) * fs/notify: Enable FANOTIFY (Closes: #599877) * acer-wmi, aic94xx, asus_acpi, iscsi, janz-ican3, rtc-ds1511, tc1100-wmi: Restrict write permissions on files in procfs/sysfs * nbd: Remove module-level ioctl mutex mistakenly introduced in 2.6.37 * [x86] crypto: Re-enable AES_NI_INTEL as module (Closes: #597658) * [powerpc] video/fb: Enable FB_VGA16 as built-in; build FB_CT65550, FB_NVIDIA, FB_MATROX, FB_RADEON, FB_ATY128, FB_ATY, FB_SIS, FB_3DFX as modules (Closes: #609615) [ Aurelien Jarno ] * [sh4] Export cpu_core_map to fix build failure with CONFIG_SFC=m. * [mips/5kc-malta] Enable CONFIG_VGA_CONSOLE. [ Bastian Blank ] * Enable CIFS fscache and ACL support. * Enable Xen PCI frontend. -- Ben Hutchings <email address hidden> Tue, 15 Feb 2011 04:14:09 +0000
| Superseded in lenny-release |
linux-2.6 (2.6.26-26lenny1) stable-security; urgency=high * net sched: fix kernel leak in act_police (CVE-2010-3477) * aio: check for multiplication overflow in do_io_submit (CVE-2010-3067) * cxgb3: prevent reading uninitialized stack memory (CVE-2010-3296) * eql: prevent reading uninitialized stack memory (CVE-2010-3297) * rose: Fix signedness issues wrt. digi count (CVE-2010-3310) * sctp: Do not reset the packet during sctp_packet_config() (CVE-2010-3432) * Fix pktcdvd ioctl dev_minor range check (CVE-2010-3437) * ALSA: prevent heap corruption in snd_ctl_new() (CVE-2010-3442) * thinkpad-acpi: lock down video output state access (CVE-2010-3448) * sctp: Fix out-of-bounds reading in sctp_asoc_get_hmac() (CVE-2010-3705) * setup_arg_pages: diagnose excessive argument size (CVE-2010-3858) * X.25: memory corruption in X.25 facilities parsing (CVE-2010-3873) * sys_semctl: fix kernel stack leakage (CVE-2010-4083) * ALSA: rme9652: prevent reading uninitialized stack memory (CVE-2010-4080, CVE-2010-4081) * V4L/DVB: ivtvfb: prevent reading uninitialized stack memory (CVE-2010-4079) * video/sis: prevent reading uninitialized stack memory (CVE-2010-4078) * X.25: Prevent crashing when parsing bad X.25 facilities (CVE-2010-4164) * v4l1: fix 32-bit compat microcode loading translation (CVE-2010-2963) * net: Mitigate overflow issues - Truncate recvfrom and sendto length to INT_MAX. - Limit socket I/O iovec total length to INT_MAX. - Resolves kernel heap overflow in the TIPC protcol (CVE-2010-3859) * net: ax25: fix information leak to userland (CVE-2010-3875) * can-bcm: fix minor heap overflow (CVE-2010-3874) * net: packet: fix information leak to userland (CVE-2010-3876) * net: tipc: fix information leak to userland (CVE-2010-3877) * inet_diag: Make sure we actually run the same bytecode we audited (CVE-2010-3880) * ipc: shm: fix information leak to userland (CVE-2010-4072) * ipc: initialize structure memory to zero for compat functions (CVE-2010-4073) * USB: serial/mos*: prevent reading uninitialized stack memory (CVE-2010-4074) * [SCSI] gdth: integer overflow in ioctl (CVE-2010-4157) * econet: Avoid stack overflow w/ large msgiovlen (CVE-2010-3848) * econet: disallow NULL remote addr for sendmsg() (CVE-2010-3849) * econet: Add mising CAP_NET_ADMIN check in SIOCSIFADDR (CVE-2010-3850) -- dann frazier <email address hidden> Wed, 24 Nov 2010 17:46:00 -0700
| 1 → 75 of 155 results | First • Previous • Next • Last |
